Red Hat Security Advisory

RHSA-2024:9806

Red Hat Build of Apache Camel 4.4.4 for Spring Boot security update.

Released 2024-11-15 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat build of Apache Camel 4.4.4 for Spring Boot

Fixes 2 records

TI-2024-34253 CVE-2024-51132 · GHSA-4cf2-cxp3-rjr7

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to…

HIGH 82

An XML External Entity (XXE) vulnerability in HAPI FHIR before v6.4.0 allows attackers to access sensitive information or execute arbitrary code via supplying a crafted request containing malicious XML entities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01904 Published 2024-11-05 Partial fix · 6.4.0 CWE-611

TI-2024-34894 CVE-2024-52007 · GHSA-gr3c-q7xf-47vh

XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`

MEDIUM 45

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00899 Published 2024-11-08 Partial fix · 6.4.0 CWE-611