Red Hat Security AdvisoryRHSA-2024:10035
Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP2)
Released 2024-11-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Build of Apache Camel 4.4 for Quarkus 3.8
Fixes 2 records
Priority HIGH 82
An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01904 · Published 2024-11-05 · Partial fix · 6.4.0 CWE-611
Priority LOW 25
A vulnerability was found in Quarkus CXF.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00522 · Published 2024-10-08 · Fixed in 3.15.2 CWE-532
