CVE-2025-29891

🗓️ 12 Mar 2025 14:42:59Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 181 Views

Apache Camel has a vulnerability allowing header injection affecting multiple versions; upgrade recommended.

Reporter	Title	Published	Views	Family All 33
ATTACKERKB	CVE-2026-47323	19 May 202612:25	–	attackerkb
ATTACKERKB	CVE-2026-33454	27 Apr 202609:42	–	attackerkb
BDU FSTEC	The vulnerability of the HeaderHandler component in the Java framework of Apache Camel allows a attacker to compromise the integrity and accessibility of the protected information.	2 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-29891	12 Mar 202515:58	–	circl
CNNVD	Apache Camel 安全漏洞	12 Mar 202500:00	–	cnnvd
CNNVD	Apache Camel 安全漏洞	1 Apr 202500:00	–	cnnvd
CNVD	Apache Camel Arbitrary Command Execution Vulnerability (CNVD-2025-05168)	13 Mar 202500:00	–	cnvd
Cvelist	CVE-2025-29891 Apache Camel: Camel Message Header Injection through request parameters	12 Mar 202514:42	–	cvelist
GithubExploit	Exploit for Improper Neutralization of Internal Special Elements in Apache Camel	23 Oct 202509:54	–	githubexploit
EUVD	EUVD-2025-6254	3 Oct 202520:07	–	euvd

NVD

Vulners

Node

apache camelRange3.10.0–3.22.4

apache camelRange4.8.0–4.8.5

apache camelRange4.10.0–4.10.2

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.camel:camel",
    "product": "Apache Camel",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "4.10.2",
        "status": "affected",
        "version": "4.10.0",
        "versionType": "semver"
      },
      {
        "lessThan": "4.8.5",
        "status": "affected",
        "version": "4.8.0",
        "versionType": "semver"
      },
      {
        "lessThan": "3.22.4",
        "status": "affected",
        "version": "3.10.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
camel	www.camel.apache.org/security/CVE-2025-29891.html
camel	www.camel.apache.org/security/CVE-2025-27636.html
github	www.github.com/akamai/CVE-2025-27636-Apache-Camel-PoC