Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-xstream

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2015-5344

    Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands

    The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

    org.apache.camel:camel-xstream Maven