NuytsTech Security

CVE-2015-5344

by ·

The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

Date published : 2016-02-03

http://www.securityfocus.com/bid/82260

http://www.securityfocus.com/archive/1/537414/100/0/threaded

Tags: