CVE-2017-12633: Apache Camel camel-hessian component vulnerable to Java object deserialization

The vulnerability centers around unsafe Java deserialization in the Hessian component. The primary vulnerable function is HessianDataFormat.unmarshal() which lacked class filtering pre-patch. During exploitation, the call stack would show the Camel component initiating deserialization (HessianDataFormat) followed by Hessian's internal serialization mechanisms (SerializerFactory). The high confidence for HessianDataFormat comes from direct references in security advisories and JIRA tickets, while SerializerFactory is inferred from typical Hessian exploitation patterns.