CVE-2015-5344

Published: Feb 3, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

RHSA-2016:2035

vendor-advisory

x_refsource_REDHAT

http://camel.apache.org/security-advisories.data/CVE-2015-5344.txt.asc

x_refsource_CONFIRM

82260

vdb-entry

x_refsource_BID

20160130 CVE-2015-5344 - Apache Camel medium disclosure vulnerability

mailing-list

x_refsource_BUGTRAQ

[camel-commits] 20190430 svn commit: r1044347 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0194.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

[camel-commits] 20190524 svn commit: r1045395 - in /websites/production/camel/content: cache/main.pageCache security-advisories.data/CVE-2019-0188.txt.asc security-advisories.html

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2015-5344

Description

Affected Products

References