Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Integration Camel for Spring Boot ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 35
-
Critical 9.8
Undertow client not checking server identity presented by server certificate in https connections
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
-
Critical 9.1
Apache Ivy allows creating/overwriting any file on the system
With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the fly if they used pack200 or zip packaging. For artifacts using the "zip", "jar" or "war" packaging Ivy prior to 2.5.1 doesn't verify the targ…
-
High 8.2
Californium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of records
Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services. In versions prior to 3.7.0, and 2.7.4, Californium is vulnerable to a Denial of Service. Failing handshakes don't cleanup counters for throttlin…
-
High 8.2CVE-2022-41966 Public exploit
XStream Denial of Service via stack overflow
XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack…
-
High 8.0CVE-2022-41853 Public exploit
Remote code execution in HyperSQL DataBase
Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb (HyperSQL DataBase) to process untrusted input may be vulnerable to a remote code execution attack. By default it is allowed to call any static method of any Java class in the classpath re…
-
High 7.5
Denial of Service (DoS)
The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.
-
High 7.5
Apache Ivy allows path traversal in the presence of a malicious repository
When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied "pattern" that may include placeholders for artifacts coordinates like the organisation, module or version. If said coordinates contain "../…
-
High 7.5CVE-2022-40146 Public exploit
Jar url should be blocked by DefaultScriptSecurity
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.
-
High 7.5CVE-2022-40156 Rejected
DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…
-
High 7.5
Apache Batik prior to 1.16 allows RCE when loading untrusted SVG input
A vulnerability in Batik of Apache XML Graphics allows an attacker to run untrusted Java code from an SVG. This issue affects Apache XML Graphics prior to 1.16. It is recommended to update to version 1.16.
-
High 7.5
Uncontrolled Resource Consumption in Jackson-databind
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.
-
High 7.5
Uncontrolled Resource Consumption in FasterXML jackson-databind
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for des…
-
High 7.5
Apache Batik prior to 1.16 allows RCE via scripting
A vulnerability in Batik of Apache XML Graphics allows an attacker to run Java code from untrusted SVG via JavaScript. This issue affects Apache XML Graphics prior to 1.16. Users are recommended to upgrade to version 1.16.
-
High 7.5
Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON
[Json-smart](https://netplex.github.io/json-smart/) is a performance focused, JSON processor lib. When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any lim…
-
High 7.5CVE-2023-20860 Public exploit
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a securit…
-
High 7.5
Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request
When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an authentication bypass. The authentication bypass occurs when Shiro and Spring Boot are using different pattern-matching techniques. Both Shiro …
-
High 7.5
Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…
-
Medium 6.5
Apache Commons Net's FTP client trusts the host from PASV response by default
Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may l…
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.
-
Medium 6.5
DoS in SnakeYAML
Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.
-
Medium 6.5
Stack Buffer Overflow in Jettison
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may su…
-
Medium 6.5
Stack Buffer Overflow in xstream
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial o…
-
Medium 6.5CVE-2022-40152 EPSS 18%
Stack Buffer Overflow in Woodstox
Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…
-
Medium 6.5
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
-
Medium 6.5
Spring Framework vulnerable to denial of service
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition.
-
Medium 5.9
Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM
Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in the middle attack. Connections from the Pulsar Java Client to the Pulsar Broker/Proxy and connections from the Pulsar Proxy to the Pulsar …
-
Medium 5.9
Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
-
Medium 5.8
Stack Overflow in Snakeyaml
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may suppor…
-
Medium 5.4
Apache Spark XSS vulnerability in log viewer UI Javascript
A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in log…
-
Medium 5.3
Server-Side Request Forgery Information Disclosure Vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.
-
Medium 5.3
PDFTranscoder does not block external resources
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.
-
Medium 5.3
HAProxyMessageDecoder Stack Exhaustion DoS
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.F…
-
Unscored —
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
Revision history
-
#22
Neue Updates von IBM aufgenommen
-
#21
Neue Updates von Dell aufgenommen
-
#20
Neue Updates von Dell aufgenommen
-
#19
Neue Updates von Red Hat aufgenommen
-
#18
Neue Updates von Red Hat aufgenommen
-
#17
Neue Updates von Red Hat aufgenommen
-
#16
Neue Updates von Red Hat aufgenommen
-
#15
Neue Updates von Amazon aufgenommen
-
#14
Neue Updates von Dell aufgenommen
-
#13
Neue Updates von Dell aufgenommen
-
#12
Neue Updates von Red Hat aufgenommen
-
#11
Neue Updates von Red Hat aufgenommen
-
#10
Neue Updates von Red Hat aufgenommen
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Neue Updates von Amazon aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Red Hat aufgenommen
-
#5
Neue Updates von Red Hat aufgenommen
-
#4
Neue Updates von Red Hat aufgenommen
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
RedHat Security Advisory vom 2023-05-03
https://access.redhat.com/errata/RHSA-2023:2100
-
Red Hat Security Advisory RHSA-2023:3179 vom 2023-05-17
https://access.redhat.com/errata/RHSA-2023:3179
-
Red Hat Security Advisory RHSA-2023:3193 vom 2023-05-17
https://access.redhat.com/errata/RHSA-2023:3193
-
Red Hat Security Advisory RHSA-2023:3622 vom 2023-06-15
https://access.redhat.com/errata/RHSA-2023:3622
-
Red Hat Security Advisory RHSA-2023:3667 vom 2023-06-19
https://access.redhat.com/errata/RHSA-2023:3667
-
Red Hat Security Advisory RHSA-2023:3626 vom 2023-06-23
https://access.redhat.com/errata/RHSA-2023:3626
-
Red Hat Security Advisory RHSA-2023:3625 vom 2023-06-23
https://access.redhat.com/errata/RHSA-2023:3625
-
Red Hat Security Advisory RHSA-2023:3906 vom 2023-06-28
https://access.redhat.com/errata/RHSA-2023:3906
-
Red Hat Security Advisory RHSA-2023:3954 vom 2023-06-29
https://access.redhat.com/errata/RHSA-2023:3954
-
Amazon Linux Security Advisory ALAS2-2023-2165 vom 2023-07-26
https://alas.aws.amazon.com/AL2/ALAS-2023-2165.html
-
Red Hat Security Advisory RHSA-2023:4506 vom 2023-08-07
https://access.redhat.com/errata/RHSA-2023:4506
-
Red Hat Security Advisory RHSA-2023:4507 vom 2023-08-07
https://access.redhat.com/errata/RHSA-2023:4507
-
Red Hat Security Advisory RHSA-2023:4505 vom 2023-08-07
https://access.redhat.com/errata/RHSA-2023:4505
-
Red Hat Security Advisory RHSA-2023:4509 vom 2023-08-07
https://access.redhat.com/errata/RHSA-2023:4509
-
Red Hat Security Advisory RHSA-2023:4612 vom 2023-08-16
https://access.redhat.com/errata/RHSA-2023:4612
-
Red Hat Security Advisory RHSA-2023:4919 vom 2023-08-31
https://access.redhat.com/errata/RHSA-2023:4919
-
Red Hat Security Advisory RHSA-2023:4921 vom 2023-08-31
https://access.redhat.com/errata/RHSA-2023:4921
-
Red Hat Security Advisory RHSA-2023:4924 vom 2023-08-31
https://access.redhat.com/errata/RHSA-2023:4924
-
Red Hat Security Advisory RHSA-2023:4918 vom 2023-08-31
https://access.redhat.com/errata/RHSA-2023:4918
-
Red Hat Security Advisory RHSA-2023:4920 vom 2023-08-31
https://access.redhat.com/errata/RHSA-2023:4920
-
Red Hat Security Advisory RHSA-2023:7670 vom 2023-12-06
https://access.redhat.com/errata/RHSA-2023:7670
-
Dell Security Advisory DSA-2023-300 vom 2023-12-22
https://www.dell.com/support/kbdoc/000220649/dsa-2023-=
-
Dell Security Advisory DSA-2023-409 vom 2023-12-23
https://www.dell.com/support/kbdoc/000220669/dsa-2023-=
-
Amazon Linux Security Advisory ALAS-2024-1910 vom 2024-01-23
https://alas.aws.amazon.com/ALAS-2024-1910.html
-
Red Hat Security Advisory RHSA-2024:1027 vom 2024-02-28
https://access.redhat.com/errata/RHSA-2024:1027
-
Red Hat Security Advisory RHSA-2025:3541 vom 2025-04-02
https://access.redhat.com/errata/RHSA-2025:3541
-
Red Hat Security Advisory RHSA-2025:3543 vom 2025-04-02
https://access.redhat.com/errata/RHSA-2025:3543
-
Red Hat Security Advisory RHSA-2025:8761 vom 2025-06-10
https://access.redhat.com/errata/RHSA-2025:8761
-
Red Hat Security Advisory RHSA-2025:9922 vom 2025-06-30
https://access.redhat.com/errata/RHSA-2025:9922
-
Deell Security Update
https://www.dell.com/support/kbdoc/en-us/000281732/dsa-2025-075-security-update-for-dell-data-protection-advisor-for-multiple-component-vulnerabilities
-
Dell Security Advisory DSA-2026-152 vom 2026-03-23
https://www.dell.com/support/kbdoc/de-de/000443243/dsa-2026-152-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
-
IBM Security Bulletin 7282930 vom 2026-08-11
https://www.ibm.com/support/pages/node/7282930