GitHub Advisoryadvisory · Maven

GHSA-hfg5-xpvw-c9x4 Improper Input Validation in Apache Camel

HIGH Published 2021-05-21 Modified 2021-09-01 Official page ↗
Aliases
CVE-2020-11971
Ecosystem
Maven
Packages
org.apache.camel:camel, org.apache.camel:camel-core, org.apache.camel:camel-management
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-20
Reviewed
2021-05-21

Affected packages

• Maven org.apache.camel:camel: < 3.2.0 → fixed in 3.2.0 • Maven org.apache.camel:camel-core: < 3.2.0 → fixed in 3.2.0 • Maven org.apache.camel:camel-management: < 3.2.0 → fixed in 3.2.0

Description

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel users should upgrade to 3.2.0.

Related

Alias · CVE (1)

  • CVE-2020-11971 Apache Camel's JMX is vulnerable to Rebind Flaw. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References