Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

🗓️ 06 Jul 2026 09:30:29Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 8 Views

SSRF in Apache Camel Solr via SolrParam/SolrField header prefixes bypassing HTTP header filter.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2026-48203	6 Jul 202608:06	–	attackerkb
BDU FSTEC	The vulnerability of the camel-solr component of the Apache Camel Java framework, which allows a hacker to gain unauthorized access to confidential information or perform a SSRF attack	20 Jul 202600:00	–	bdu_fstec
Circl	CVE-2026-48203	5 Jul 202620:31	–	circl
CVE	CVE-2026-48203	6 Jul 202608:06	–	cve
Cvelist	CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields	6 Jul 202608:06	–	cvelist
EUVD	EUVD-2026-41838	6 Jul 202608:06	–	euvd
Kitploit	CVE-2026-48203	30 Aug 202607:18	–	kitploit
NVD	CVE-2026-48203	6 Jul 202609:16	–	nvd
OSV	GHSA-4H4F-V54Q-7PQ8 Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields	6 Jul 202609:30	–	osv
Positive Technologies	PT-2026-55899	6 Jul 202600:00	–	ptsecurity

Vulners

Node

OR

org.apache.camel camel-solrRange4.19.0–4.21.0maven

org.apache.camel camel-solrRange4.15.0–4.18.3maven

org.apache.camel camel-solrRange4.0.0–4.14.8maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-48203
camel	www.camel.apache.org/security/CVE-2026-48203.html
openwall	www.openwall.com/lists/oss-security/2026/07/05/17
github	www.github.com/apache/camel/pull/23410
github	www.github.com/apache/camel/pull/23483
github	www.github.com/apache/camel/pull/23489
github	www.github.com/apache/camel/commit/4578a9014a6b7a914cf16baf2c5bf62a7b163a88
github	www.github.com/apache/camel/commit/cfc0d51f015b3112eae4ce0968d045f00e95c796
github	www.github.com/apache/camel/commit/f79cbe3f8bc3fe1095d8492e9ef321289451d457
github	www.github.com/apache/camel/releases/tag/camel-4.14.8

28 Aug 2026 21:52Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.1

EPSS0.006

SSVC

Apache Camel Solr SSRF Header Injection HTTP Header Filter Solr Parameter Injection Exchange Headers