Deserialization of Untrusted Data in Apache Camel SQL

CAO 7.8CVE-2024-22369 · GHSA-36xr-4x2f-cfj9 · Công bố 20/02/2024 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2024-22369 là lỗ hổng mức CAO (CVSS 7.8) ảnh hưởng org.apache.camel:camel-sql, camel (apache).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.75%, cao hơn 54.9% các lỗ hổng khác.
Cách xử lý: cập nhật lên 3.21.4, 3.22.1, 4.0.4, 4.4.0 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
org.apache.camel:camel-sql Maven	`≥ 3.0.0, < 3.21.4≥ 3.22.0, < 3.22.1≥ 4.0.0, < 4.0.4≥ 4.1.0, < 4.4.0`	`3.21.43.22.14.0.44.4.0`
camel apache	`= 3.22.0≥ 3.0.0, < 3.21.4≥ 4.0.0, < 4.0.4≥ 4.1.0, < 4.4.0`	`3.21.44.0.44.4.0`

Mô tả

Deserialization of Untrusted Data vulnerability in Apache Camel SQL Component. This issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.

Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1

Mô tả của NVD

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0. Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1