Red Hat Security AdvisoryRHSA-2025:23143
Red Hat Build of Apache Camel 4.14.2 for Spring Boot release.
Released 2025-12-11 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat build of Apache Camel 4.14.2 for Spring Boot 3.5.8
Fixes 3 records
Priority CRITICAL 85
Critical XXE in Apache Tika tika-core (1.13-3.2.1), tika-pdf-module (2.0.0-3.2.1) and tika-parsers (1.13-1.28.5) modules on all platforms allows an attacker to carry out XML External Entity injection via a crafted XFA fi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.89024 · Published 2025-12-04 · Fixed in 2.0.0, 3.2.2 CWE-611
Priority MEDIUM 43
A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02325 · Published 2025-09-02 · Partial fix · 2.2.38.Final, 1.4.18-21.SP19_redhat_00001.1.ep7.el7 +50 CWE-770
Priority LOW 35
Uncontrolled Recursion vulnerability in Apache Commons Lang.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02632 · Published 2025-07-11 · Partial fix · 3.18.0 CWE-674
