RHSA-2024:3708HighCVSS 9.8

Red Hat Security Advisory: Red Hat Build of Apache Camel 3.20.6 for Spring Boot security update.

Published
June 6, 2024
Last Modified
May 27, 2026

🔗 CVE IDs covered (6)

CVE-2022-45685 →CVE-2023-44483 →CVE-2024-22257 →CVE-2024-22262 →CVE-2024-28752 →CVE-2022-34169 →

📋 Description

CVE-2022-34169 — OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) CVE-2022-45685 — jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data CVE-2023-44483 — santuario: Private Key disclosure in debug-log output CVE-2024-22257 — spring-security: Broken Access Control With Direct Use of AuthenticatedVoter CVE-2024-22262 — springframework: URL Parsing with Host Validation CVE-2024-28752 — cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding

🔗 References (8)