Red Hat Security Advisory

RHSA-2024:10700

Red Hat Build of Apache Camel 4.8 for Spring Boot security update.

Released 2024-12-02 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Apache Camel 4.8 for Spring Boot

Fixes 3 records

TI-2024-26046 CVE-2024-38819 · GHSA-g5vr-rgqm-vf78

Path traversal in Spring Framework

HIGH 72

Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.56463 Published 2024-12-19 Partial fix · 6.1.14 CWE-22

TI-2024-06719 CVE-2024-7254 · GHSA-735f-pc8j-v9w8

Stack overflow in Protocol Buffers Java Lite

MEDIUM 49

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02772 Published 2024-09-19 Partial fix · 28.2, 3.25.5 +2 CWE-400

TI-2024-20521 CVE-2024-31141 · GHSA-2x2g-32r7-p4x8

Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider

LOW 32

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0133 Published 2024-11-19 Partial fix · 3.7.1 CWE-269