Not rated
CVE-2017-3159 Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability
Description
Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Camel | Versions not published |
References
- RHSA-2017:0868 access.redhat.com
- www.github.com www.github.com
- 96321 www.securityfocus.com
- [oss-security] 20170522 Code Execution through a variety Java (Un-)Marshallers www.openwall.com
- camel.apache.org camel.apache.org
- [camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html lists.apache.org
- [camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Camel
The 97 CVEs of Apache Camel →
CVE-2026-71569
Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component
4.8
Medium
CVE-2026-90885
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component
7.5
High
CVE-2026-94386
Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component
4.8
Medium
CVE-2026-95628
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling…
5.4
Medium