Red Hat Security Advisory

RHSA-2023:3740

Red Hat Integration Camel for Spring Boot 3.20.1 Patch 1 release security update

Released 2023-06-21 · Red Hat rating Important · View on Red Hat →

Fixed in

RHINT Camel-Springboot 3.20.1.P1

Fixes 2 records

TI-2023-10315 CVE-2023-24815 · GHSA-53jx-vvf9-4x38

Disclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web

MEDIUM 57

Vert.x-Web is a set of building blocks for building web applications in the java programming language.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00919 Published 2023-02-09 Partial fix · 4.3.8 CWE-22

TI-2023-07299 CVE-2023-20883 · GHSA-xf96-w227-r7c4

Uncontrolled resource consumption in Spring Boot

MEDIUM 41

In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service (DoS) attack if Spring MVC is used together with a reverse…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00911 Published 2023-05-26 Partial fix · 3.0.7, 2.7.12 +2 CWE-400