Red Hat Integration Camel Quarkus 2 vulnerabilities

5 known vulnerabilities in Red Hat Integration Camel Quarkus 2 from Red Hat. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  A flaw was found in Undertow that can cause remote denial of service attacks.

  CVE-2024-3884Dec 3, 2025Red HatEPSS 1.46%

  A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause

• 7.0 High severity

  HawtIO 4.0.0 for Red Hat build of Apache Camel 4: Cleartext Storage of Sensitive Information in an Environment Variable

  CVE-2024-2700Apr 4, 2024Red Hat

  A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namespace during the application's build, therefore, running the resulting application inherits the values captured at build time. Some local

• 7.5 High severity

  Red Hat build of Apache Camel 4.4.1 for Spring…: Uncontrolled Resource Consumption

  CVE-2024-1635Feb 19, 2024Red HatEPSS 4.57%

  A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the

• 9.8 Critical severity

  Red Hat build of Quarkus 2.13.9.Final: Improper Handling of Exceptional Conditions

  CVE-2023-6267Jan 25, 2024Red Hat

  A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being processed (deserialized) prior to the security constraints being evaluated and applied. This does not hap

• 8.1 High severity

  Openshift Serverless 1 on RHEL 8: Incorrect Authorization

  CVE-2023-4853Sep 20, 2023Red HatEPSS 2.28%

  A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy alt