CVE-2024-22371 | Apache Camel up to 3.21.3/3.22.0/4.0.3/4.3.0 EventFactory ExchangeCreatedEvent information disclosure (CAMEL-20305)

A vulnerability has been found in Apache Camel up to 3.21.3/3.22.0/4.0.3/4.3.0 and classified as problematic. This vulnerability affects the function ExchangeCreatedEvent of the component EventFactory Handler. The manipulation leads to information disclosure.

This vulnerability was named CVE-2024-22371. Access to the local network is required for this attack. There is no exploit available.

It is recommended to upgrade the affected component.