CVE-2025-27636

🗓️ 09 Mar 2025 12:09:58Reported by MendType

mend🔗 www.mend.io👁 1 Views

Bypass/injection in Apache Camel default header filter lets attackers forge Camel headers.

Reporter	Title	Published	Views	Family All 49
GithubExploit	Exploit for Improper Handling of Case Sensitivity in Apache Camel	10 Sep 202600:00	–	githubexploit
GithubExploit	Exploit for Improper Handling of Case Sensitivity in Apache Camel	9 Mar 202509:42	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Internal Special Elements in Apache Camel	23 Oct 202509:54	–	githubexploit
Akamai Blog	Detecting and Mitigating the Apache Camel Vulnerabilities	11 Mar 202516:00	–	akamaiblog
attackerkb	CVE-2026-47323	19 May 202612:25	–	attackerkb
attackerkb	CVE-2026-40453	27 Apr 202608:23	–	attackerkb
attackerkb	CVE-2026-33454	27 Apr 202609:42	–	attackerkb
Tenable Nessus	Apache Camel 3.10.0 < 3.22.4 / 4.8.x < 4.8.5 / 4.10.x < 4.10.2 Message Header Injection (CVE-2025-27636)	18 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Default Header Filtering component in the Apache Camel framework, which is related to insufficient registry checks, allows attackers to influence the integrity, accessibility, and confidentiality of the protected information.	14 Mar 202500:00	–	bdu_fstec
Circl	CVE-2025-27636	9 Mar 202515:26	–	circl

Source	Link
github	www.github.com/apache/camel/commit/23a833eec6131a3cdce6e4b1b40b3ac2035b6adf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27636
github	www.github.com/apache/camel
camel	www.camel.apache.org/security/CVE-2025-27636.html
camel	www.camel.apache.org/security/CVE-2025-27636.txt.asc
openwall	www.openwall.com/lists/oss-security/2025/03/09/1
github	www.github.com/apache/camel/blob/camel-4.9.0/core/camel-support/src/main/java/org/apache/camel/support/DefaultHeaderFilterStrategy.java
repo	www.repo.maven.apache.org/maven2
lists	www.lists.apache.org/thread/l3zcg3vts88bmc7w8172wkgw610y693z
github	www.github.com/apache/camel/commit/45a6b74f7f8af8fd58f197566938a9534392a624

03 Oct 2026 01:47Current

CVSS 3.15.6

CVSS 46.3

EPSS0.97057

SSVC

Apache Camel injection header filter camel-bean camel-jms camel-exec