Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.
Metrics
Affected Vendors & Products
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.

Status: PUBLISHED
Assigner: apache
Published:
Updated: 2024-08-04T11:48:56.989Z
Reserved: 2020-04-21T00:00:00
Link: CVE-2020-11973

No data.

Status : Modified
Published: 2020-05-14T17:15:12.193
Modified: 2024-11-21T04:59:01.343
Link: CVE-2020-11973


No data.