Red Hat Security Advisory

RHSA-2025:1078

Red Hat Build of Apache Camel 4.8.3 for Spring Boot security update.

Released 2025-02-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Apache Camel 4.8.3 for Spring Boot

Fixes 3 records

TI-2024-36149 CVE-2024-53990 · GHSA-mfj5-cf8g-g2fv

AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

HIGH 73

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00722 Published 2024-12-02 Partial fix · 3.0.1, 2.12.4 CWE-287

TI-2024-34922 CVE-2024-52046 · GHSA-76h9-2vwh-w278

Apache MINA: MINA applications using unbounded deserialization may allow RCE

HIGH 70

The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.24649 Published 2024-12-25 Partial fix · 2.2.4, 2.1.10 +1 CWE-502

TI-2024-11860 CVE-2024-12798 · GHSA-pr98-23f8-jwxv

JaninoEventEvaluator vulnerability

LOW 29

ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core upto including version 0.1 to 1.3.14 and 1.4.0 to 1.5.12 in Java applications allows attacker to execute arbitrary code by compromising an existing logback…

CVSS 4.0MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00458 Published 2024-12-19 Partial fix · 1.3.15, 1.5.13 CWE-917