25 matches found
CVE-2026-79986
CVE-2026-79986 — camel-azure-files: consumer builds the remote path from the share listing without containment Reproducer repository for the Apache Camel vulnerability where the azure-files consumer — which derives from the same RemoteFileConsumer base class as the other remote-file consumers and...
CVE-2026-79986
A flaw was found in the Apache Camel Azure Files component. When polling remote directories, the component concatenates file paths without properly sanitizing or restricting them to the designated folder. A malicious server or an attacker manipulating directory listing responses can supply...
org.apache.camel.kafkaconnector:camel-azure-storage-files-source-kafka-connector (>=4.4.2, <=4.18.0), org.apache.camel.karaf:camel-azure-files (>=4.7.0, <=4.18.4) +3 more potentially affected by CVE-2026-79986 via org.apache.camel:camel-azure-files (>=4.0.0, <=4.18.4)
org.apache.camel:camel-azure-files MAVEN version =4.0.0, =4.4.2, =4.7.0, =3.22.0, =3.22.0, =4.0.0, =4.18.4 Source cves: CVE-2026-79986 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21691247...
org.apache.camel.kafkaconnector:camel-azure-storage-files-source-kafka-connector (4.22.0), org.apache.camel.quarkus:camel-quarkus-azure-files (>=3.35.0, <=3.39.0) +2 more potentially affected by CVE-2026-79986 via org.apache.camel:camel-azure-files (>=4.19.0, <=4.22.0)
org.apache.camel:camel-azure-files MAVEN version =4.19.0, =3.35.0, =3.35.0, =4.19.0, =4.22.0 Source cves: CVE-2026-79986 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21691247...
CVE-2026-79986
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
CVE-2026-79986
The Apache Camel Azure Files component is vulnerable to a Path Traversal (CWE-22) flaw due to improper path concatenation. The azure-files consumer builds remote paths by joining a configured directory with file names from server listings without lexical normalization or containment checks . Cons...
EUVD-2026-104216
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
CVE-2026-79986 Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
CVE-2026-79986 Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
CVE-2026-79986 Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry containing traversal segments could be moved outside
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
CVE-2026-79986
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
PT-2026-117337
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in the Apache Camel Azure Files component. The...
Apache Camel path traversal vulnerability
Versions of Apache Camel from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain a path traversal vulnerability. This vulnerability arises due to the Azure Files component failing to normalize the construction of absolute paths by concatenating configuration directories with lists of server...
CVE-2026-79986: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Camel remote-file consumers poll a directory on a remote server and build the...
Apache Camel 4.22.0 Azure Files Path Traversal
Apache Camel version 4.22.0 azure-files consumers can resolve a server-supplied listing name outside the configured directory, permitting retrieval and potentially deletion or rename of files using the endpoint credentials...
Exploit for CVE-2026-79986
CVE-2026-79986 — camel-azure-files: consumer builds the remote...
[SECURITY] Fedora 43 Update: rclone-1.74.3-1.fc43
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...
[SECURITY] Fedora 44 Update: rclone-1.74.3-1.fc44
"rsync for cloud storage" - Google Drive, S3, Dropbox, Backblaze B2, One Driv e, Swift, Hubic, Wasabi, Google Cloud Storage, Azure Blob, Azure Files, Yandex Files...