EPSS
Percentile
83.0%
Apache Camel’s camel-snakeyaml component is vulnerable to remote code execution through a Java object deserialization vulnerability. It is possible to deserialize untrusted data in an unmarshalling operation that leads to remote code execution.
camel.apache.org/security-advisories.data/CVE-2017-3159.txt.asc
issues.apache.org/jira/browse/CAMEL-10575