Security Advisory

CVE-2020-11973

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-14 16:22:23
Last updated 2024-08-04 11:48:56
Assigner apache
State PUBLISHED

Description

Apache Camel Netty enables Java deserialization by default. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 are affected. 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0.