CVE-2017-3159

Critical

Published: 07/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The camel-snakeyaml component in Apache Camel is vulnerable to a Java object de-serialization vulnerability. De-serializing untrusted data can lead to serious security flaws.

Risk Assessment

The organization may be exposed to attacks that exploit this vulnerability to inject malicious code, potentially leading to data loss or unauthorized access.

Recommendation

It is recommended to avoid de-serializing untrusted data and to update the component to the latest version to minimize risk.

Original NVD description (English source)

Apache Camel's camel-snakeyaml component is vulnerable to Java object de-serialization vulnerability. De-serializing untrusted data can lead to security flaws.