CVE-2017-12634

Critical

Published: 15/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.

Risk Assessment

Organizations may be exposed to attacks that exploit this vulnerability, potentially leading to unauthorized access to systems or data.

Recommendation

It is recommended to upgrade Apache Camel to version 2.19.4 or 2.20.1 to mitigate this vulnerability.

Original NVD description (English source)

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.