You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@camel.apache.org by "Andrea Cosentino (JIRA)" <ji...@apache.org> on 2019/02/07 16:35:00 UTC

[jira] [Assigned] (CAMEL-13169) c3p0 dependent version (0.9.5.2) has a security vulnerability (CVE-2018-20433)

     [ https://issues.apache.org/jira/browse/CAMEL-13169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Andrea Cosentino reassigned CAMEL-13169:
----------------------------------------

    Assignee: Andrea Cosentino

> c3p0 dependent version (0.9.5.2) has a security vulnerability (CVE-2018-20433)
> ------------------------------------------------------------------------------
>
>                 Key: CAMEL-13169
>                 URL: https://issues.apache.org/jira/browse/CAMEL-13169
>             Project: Camel
>          Issue Type: Bug
>          Components: camel-quartz2
>    Affects Versions: 2.23.1
>            Reporter: Abraham Ciokler
>            Assignee: Andrea Cosentino
>            Priority: Critical
>
> camel-quartz2 latest version (2.23.1) has a dependency on c3p0 version 0.9.5.2 and that version has a security vulnerability (CVE-2018-20433)
> source: https://nvd.nist.gov/vuln/detail/CVE-2018-20433
> The issue seems to be resolved by updating the dependency of c3p0 to 0.9.5.2. Please, update the camel-quartz2 to use newest version of c3p0 (0.9.5.2 at the time of writing this).



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)