Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.7 for Spring Boot release.
Red Hat has released a security advisory for the Red Hat Build of Apache Camel 4.10.7 for Spring Boot, addressing multiple vulnerabilities across several components including Spring Security, Spring Framework, Eclipse JGit, Netty, and Minio Java client. The update fixes an authorization bypass, annotation detection vulnerabilities, an XML External Entity (XXE) vulnerability, HTTP request smuggling issues, and XML tag value substitution vulnerabilities. This advisory informs users of the availability of a patch release that mitigates these security issues.
AI Analysis
Technical Summary
This advisory covers a patch release for Red Hat Build of Apache Camel 4.10.7 for Spring Boot that fixes five distinct security vulnerabilities: CVE-2025-41248 (Spring Security authorization bypass), CVE-2025-41249 (Spring Framework annotation detection vulnerability), CVE-2025-4949 (XXE vulnerability in Eclipse JGit), CVE-2025-58056 (HTTP request smuggling in Netty due to incorrect parsing of chunk extensions), and CVE-2025-59952 (XML tag value substitution vulnerability in minio-java client). The update is classified as important by Red Hat Product Security and addresses these issues by applying patches to the affected components.
Potential Impact
The vulnerabilities fixed include an authorization bypass that could allow unauthorized access, annotation detection flaws that may affect application behavior, an XXE vulnerability that could lead to XML-based attacks, HTTP request smuggling that can disrupt HTTP traffic handling, and XML tag value substitution that may allow malicious XML payload manipulation. These issues collectively pose a high security risk to applications using the affected components if left unpatched.
Mitigation Recommendations
A patch release for Red Hat Build of Apache Camel 4.10.7 for Spring Boot is available and should be applied. Before applying this update, ensure all previously released relevant errata are installed. Follow Red Hat's official guidance on applying updates at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying this official patch.
Red Hat Security Advisory: Red Hat Build of Apache Camel 4.10.7 for Spring Boot release.
Description
Red Hat has released a security advisory for the Red Hat Build of Apache Camel 4.10.7 for Spring Boot, addressing multiple vulnerabilities across several components including Spring Security, Spring Framework, Eclipse JGit, Netty, and Minio Java client. The update fixes an authorization bypass, annotation detection vulnerabilities, an XML External Entity (XXE) vulnerability, HTTP request smuggling issues, and XML tag value substitution vulnerabilities. This advisory informs users of the availability of a patch release that mitigates these security issues.
Affected software
pkg:maven/org.apache.camel/camel-spring-bootRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers a patch release for Red Hat Build of Apache Camel 4.10.7 for Spring Boot that fixes five distinct security vulnerabilities: CVE-2025-41248 (Spring Security authorization bypass), CVE-2025-41249 (Spring Framework annotation detection vulnerability), CVE-2025-4949 (XXE vulnerability in Eclipse JGit), CVE-2025-58056 (HTTP request smuggling in Netty due to incorrect parsing of chunk extensions), and CVE-2025-59952 (XML tag value substitution vulnerability in minio-java client). The update is classified as important by Red Hat Product Security and addresses these issues by applying patches to the affected components.
Potential Impact
The vulnerabilities fixed include an authorization bypass that could allow unauthorized access, annotation detection flaws that may affect application behavior, an XXE vulnerability that could lead to XML-based attacks, HTTP request smuggling that can disrupt HTTP traffic handling, and XML tag value substitution that may allow malicious XML payload manipulation. These issues collectively pose a high security risk to applications using the affected components if left unpatched.
Mitigation Recommendations
A patch release for Red Hat Build of Apache Camel 4.10.7 for Spring Boot is available and should be applied. Before applying this update, ensure all previously released relevant errata are installed. Follow Red Hat's official guidance on applying updates at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying this official patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:18028
- Cve Count
- 5
- Additional Cves
- ["CVE-2025-41248","CVE-2025-41249","CVE-2025-58056","CVE-2025-59952"]
- Cvss Version
- null
Threat ID: 6a294d7d8dd33fbd853ac365
Added to database: 06/10/2026, 11:41:49 UTC
Last enriched: 07/30/2026, 09:33:28 UTC
Last updated: 08/02/2026, 07:17:54 UTC
Views: 107
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.