Security Advisory
CVE-2015-5344
9.8
CRITICAL
Vulnerability Description
The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
Published Date
February 3, 2016
Official Source
NIST NVD Advisory