Apache Camel RabbitMQ enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
Metrics
Affected Vendors & Products
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: apache
Published:
Updated: 2024-08-04T11:48:57.301Z
Reserved: 2020-04-21T00:00:00
Link: CVE-2020-11972

No data.

Status : Modified
Published: 2020-05-14T17:15:12.117
Modified: 2024-11-21T04:59:01.190
Link: CVE-2020-11972


No data.