Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2026/07/06 9:30 a.m.•18 views

Apache Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Iggy component. The camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any...

7.5CVSS7.1AI score0.00625EPSS
SaveExploits2References11Affected Software1
OSV
OSV
•added 2026/07/06 9:30 a.m.•13 views

GHSA-PW9Q-PQ7C-RFQW Apache Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Iggy component. The camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any...

7.5CVSS7.1AI score0.00625EPSS
SaveExploits2References11
Vulnrichment
Vulnrichment
•added 2026/07/06 8:13 a.m.•13 views

CVE-2026-55994 Apache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling control over internal behaviour

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Iggy component. The camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any...

7.1AI score0.00625EPSS
SaveExploits2References1
CVE
CVE
•added 2026/07/06 8:13 a.m.•79 views

CVE-2026-55994

Apache Camel's camel-iggy component contains an improper input validation vulnerability where the consumer maps inbound Iggy message user-headers into the Camel Exchange header map without a HeaderFilterStrategy . This allows an attacker who can publish to a consumed Iggy stream to inject interna...

7.5CVSS7.1AI score0.00625EPSS
SaveExploits2References2Affected Software1
OSV
OSV
•added 2026/07/06 8:13 a.m.•16 views

CVE-2026-55994 Apache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling control over internal behaviour

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Iggy component. The camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any...

7.5CVSS6.1AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•30 views

PT-2026-55910

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Iggy component. The camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any...

7.1AI score0.00625EPSS
SaveExploits2References2
Rows per page
Query Builder