RHSA-2023:5148HighCVSS 9.8

Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.2 release and security update

Published
September 13, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2023-20873 →CVE-2023-34455 →

📋 Description

CVE-2023-20873 — spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry CVE-2023-34455 — snappy-java: Unchecked chunk length leads to DoS

🎯 Affected products1

  • RHINT Camel-Springboot 3.20.2

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Disable Cloud Foundry actuator endpoints by setting 'management.cloudfoundry.enabled' to false.

🔗 References (6)