CVE-2017-12633

Critical

Published: 15/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The camel-hessian component in Apache Camel versions 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to a Java object de-serialization vulnerability. De-serializing untrusted data can lead to serious security flaws.

Risk Assessment

The organization may be exposed to attacks that exploit this vulnerability to execute unauthorized code or gain access to sensitive data.

Recommendation

It is recommended to upgrade Apache Camel to version 2.19.4 or 2.20.1 to mitigate this vulnerability.

Original NVD description (English source)

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.