This is an automated email from the ASF dual-hosted git repository. acosentino pushed a commit to branch CVE-2022-45046 in repository https://gitbox.apache.org/repos/asf/camel-website.git
commit faceec7ab715508ab58aa9b82ca4f35f9a8bb392 Author: Andrea Cosentino <[email protected]> AuthorDate: Mon Dec 5 09:43:48 2022 +0100 Added security advisory for CVE-2022-45046 Signed-off-by: Andrea Cosentino <[email protected]> --- content/security/CVE-2022-45046.md | 18 ++++++++++++++++++ content/security/CVE-2022-45046.txt.asc | 31 +++++++++++++++++++++++++++++++ 2 files changed, 49 insertions(+) diff --git a/content/security/CVE-2022-45046.md b/content/security/CVE-2022-45046.md new file mode 100644 index 00000000..5bd2c80d --- /dev/null +++ b/content/security/CVE-2022-45046.md @@ -0,0 +1,18 @@ +--- +title: "Apache Camel Security Advisory - CVE-2022-45046" +date: 2022-12-05T08:47:42+02:00 +url: /security/CVE-2022-45046.html +draft: false +type: security-advisory +cve: CVE-2022-45046 +severity: MEDIUM +summary: "LDAP Injection in camel-ldap" +description: "LDAP Injection on camel-ldap component when using the filter option." +mitigation: "Users should upgrade to 3.14.6 or 3.18.4" +credit: "This issue was discovered by 4ra1n from Chaitin Tech" +affected: 3.0.0 up to 3.14.5, and 3.15.0 up to 3.18.3, and 3.19.0. +fixed: 3.14.6, 3.18.4 +--- + +The JIRA ticket: https://issues.apache.org/jira/browse/CAMEL-186906 refers to the various commits that resovoled the issue, and have more details. + diff --git a/content/security/CVE-2022-45046.txt.asc b/content/security/CVE-2022-45046.txt.asc new file mode 100644 index 00000000..4056c648 --- /dev/null +++ b/content/security/CVE-2022-45046.txt.asc @@ -0,0 +1,31 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA256 + +CVE-2022-45046: LDAP Injection in camel-ldap + +Severity: MEDIUM + +Vendor: The Apache Software Foundation + +Versions Affected: 3.0.0 up to 3.14.5, and 3.15.0 up to 3.18.3, and 3.19.0. + +Description: LDAP Injection on camel-ldap component when using the filter option. + +Mitigation: Users should upgrade to 3.14.6 or 3.18.4 + +The JIRA ticket: https://issues.apache.org/jira/browse/CAMEL-18696 +refers to the various commits that resovoled the issue, and have more details. + +Credit: This issue was discovered by 4ra1n from Chaitin Tech + +-----BEGIN PGP SIGNATURE----- + +iQEzBAEBCAAdFiEEJ2Y0ButtuvUpHyYV406fOAL/QQAFAmONrwwACgkQ406fOAL/ +QQC+bQgApkYXOuZO1wXe74gp53QcVIgiHPRDre99t4iYFnn0Y0XJtvhcrrKoOE6w +T9alaZGFziglaYCrbuRTLkYN6wITW5Vi/jOausHHxVCEi9a4R6+ZvWdnX6zzQx7n +1E76kX2HVbleHtzlsaLszJ9UEk723lOmqGa26sTsziRagKISzTDfxKaWvjxfglng +apDRPp0ZAYrqtaLdRiVHhcYNmt/ZKjdACeThitTtXQquKxIo+A4NP9vt/sLLdDkJ +0q/eeu0JXzvIephYzixxuYkZSZL2BvphcPZz/45SSN86yPfJhPOvadTN+tEhDoqB +1koH5WvO/Y2lZ73Qaq4asi75bq1rdw== +=b/A+ +-----END PGP SIGNATURE-----
