Read the docs
Red Hat Security Advisory

RHSA-2024:0793

Red Hat Integration Camel for Spring Boot 4.0.3 release security update

Released 2024-02-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2023-05854 CVE-2023-6378 · GHSA-vmq6-5m68-f53m

Logback "receiver" DOS vulnerability

Priority LOW 35

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.009 Published 2023-11-29 Partial fix · 1.4.12, 1.3.12 +1 CWE-502
TI-2023-03751 CVE-2023-4043 · GHSA-g8p6-p27c-52fx

Parsson DoS when parsing numbers from untrusted sources

Priority LOW 35

In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2023-11-03 Partial fix · 1.0.5, 1.1.4 CWE-20
TI-2023-05939 CVE-2023-6481 · GHSA-gm62-rw4g-vrc4

Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

Priority LOW 34

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00682 Published 2023-12-04 Partial fix · 1.4.14, 1.3.14 +1