4 matches found
CVE-2026-95664
Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel AWS2-s3 component. This issue affects Apache Camel: from 4.8.0 before 4.18.5, from 4.19.0 before 4.22.2. For the object it uploads, reads or deletes,...
CVE-2026-95664
The Apache Camel aws2-s3 component is vulnerable to an Expression Language Injection (CWE-917) in versions 4.8.0 to 4.18.4 , 4.19.0 to 4.22.1 , and 4.23.0 (Note: the document states the issue is fixed in 4.18.5, 4.22.2, and 4.23.0). The root cause is that AWS2S3Utils.determineKey() evaluates valu...
CVE-2026-95664 Apache Camel: Camel-AWS2-S3 Producer Evaluates Untrusted S3 Object Keys From the CamelAwsS3Key Header as Simple Expressions
Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel AWS2-s3 component. This issue affects Apache Camel: from 4.8.0 before 4.18.5, from 4.19.0 before 4.22.2. For the object it uploads, reads or deletes,...
EUVD-2026-109668
Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel AWS2-s3 component. This issue affects Apache Camel: from 4.8.0 before 4.18.5, from 4.19.0 before 4.22.2. For the object it uploads, reads or deletes,...