Skip to content
Sign in
Not rated

CVE-2020-11973 Apache Camel Netty enables Java deserialization by default

Description

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.

Affected products and versions

Product Affected versions Fixed in
Apache Camel Versions not published

Other CVEs of Apache Camel

The 4 CVEs of Apache Camel →
CVE-2020-11994 Server-Side Template Injection and arbitrary file disclosure on Camel templating components Not rated CVE-2020-11972 Apache Camel RabbitMQ enables Java deserialization by default Not rated CVE-2020-11971 Apache Camel's JMX is vulnerable to Rebind Flaw Not rated
Track this CVE