Red Hat Security Advisory

RHSA-2023:3906

Red Hat Integration Camel K 1.10.1 release security update

Released 2023-06-28 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-01295 CVE-2023-1370 · GHSA-493p-pfq6-5258

HIGH 72

[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01119 Published 2023-03-13 Partial fix · 2.4.9 CWE-674

TI-2022-03885 CVE-2022-4244 · GHSA-g6ph-x5wf-g337

HIGH 72

A flaw was found in codeplex-codehaus.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01347 Published 2023-09-25 Partial fix · 3.0.24 CWE-22

TI-2022-18742 CVE-2022-39368 · GHSA-p72g-cgh9-ghjg

MEDIUM 43

Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00735 Published 2022-11-09 Partial fix · 2.7.4, 3.7.0 CWE-404

TI-2022-22906 CVE-2022-46363 · GHSA-3w37-5p3p-jv92

MEDIUM 41

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01261 Published 2022-12-13 Partial fix · 3.5.5, 3.4.10 CWE-20

TI-2022-20287 CVE-2022-41946 · GHSA-562r-vg33-8x8h

LOW 26

pgjdbc is an open source postgresql JDBC Driver.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00552 Published 2022-11-23 Partial fix · 42.2.27, 42.4.3 +2 CWE-200

TI-2022-03886 CVE-2022-4245 · GHSA-jcwr-x25h-x5fh

LOW 21

A flaw was found in codehaus-plexus.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00694 Published 2023-09-25 Partial fix · 3.0.24 CWE-91