1690 matches found
Server-Side Request Forgery (SSRF)
org.apache.camel, camel-dns is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of DNS-related Exchange message headers dns.server, dns.name, dns.domain, etc. that can be passed from inbound HTTP requests, which allows an attacker to manipulate DNS...
The vulnerability of the `createExchange()` function in the IggyFetchRecords class of the camel-iggy component of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the createExchange function in the IggyFetchRecords class of the camel-iggy component of the Apache Camel framework is related to insufficient validation of input data when processing user-defined message headers. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the sendEventNotification() and getQueryMap() functions in the WebsocketConsumer class of the camel-atmosphere-websocket component of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the sendEventNotification and getQueryMap functions in the WebsocketConsumer class of the camel-atmosphere-websocket component of the Apache Camel framework is related to insufficient validation of input data during the processing of WebSocket request parameters. Exploiting...
The vulnerability of the UndertowComponent class in the camel-undertow component framework of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the UndertowComponent class in the camel-undertow framework from Apache Camel is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that should be protected...
Exploit for Generation of Error Message Containing Sensitive Information in Apache Camel
camel-undertow Rest DSL muteException Stack-Trace Disclosure R...
Exploit for Server-Side Request Forgery in Apache Camel
camel-iggy User-Header Injection Reproducer CVE-2026-55994...
Exploit for Server-Side Request Forgery in Apache Camel
camel-atmosphere-websocket Header Injection Reproducer CVE-20...
The vulnerability of the getParameter() function in the AbstractSalesforceProcessor class of the camel-salesforce component of the Apache Camel framework allows a attacker to disclose protected information.
The vulnerability of the getParameter function in the AbstractSalesforceProcessor class of the camel-salesforce component of the Apache Camel framework is related to vulnerabilities in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to disclose sensitive...
The vulnerability of the components camel-netty-http and camel-undertow in the Apache Camel framework allows attackers to disclose protected information.
The vulnerability of the camel-netty-http and camel-undertow components of the Apache Camel framework is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability can allow an attacker to disclose sensitive information that should be protected...
CVE-2026-56740 vulnerabilities
Vulnerabilities for packages: pinot-fips, spark, pinot, ranger, apache-hop, apache-hop-fips, spark-kubernetes-operator-fips, kafka-fips, scala, confluent-kafka-jre-bcfips, tez, apache-camel-karavan-devmode, apache-pulsar, apache-nifi, confluent-kafka, kafka, spark-fips, hadoop-fips, druid,...
CVE-2026-56741 vulnerabilities
Vulnerabilities for packages: pinot-fips, spark, pinot, ranger, apache-hop, apache-hop-fips, spark-kubernetes-operator-fips, kafka-fips, scala, confluent-kafka-jre-bcfips, tez, apache-camel-karavan-devmode, apache-pulsar, apache-nifi, confluent-kafka, kafka, spark-fips, hadoop-fips, druid,...
Exploit for Improper Authentication in Apache Camel
camel-keycloak Fail-Open Authentication Bypass Reproducer CVE...
Exploit for Generation of Error Message Containing Sensitive Information in Apache Camel
camel-netty-http / camel-undertow muteException Stack-Trace Di...
Exploit for Authorization Bypass Through User-Controlled Key in Apache Camel
camel-salesforce sObjectQuery / apex Header Injection Reproduc...
The vulnerability of the evaluateTopic() function in the KafkaProducer class of the camel-kafka framework from Apache Camel allows a attacker to compromise the confidentiality of the protected information.
The vulnerability of the evaluateTopic function in the KafkaProducer class of the camel-kafka component from the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow a malicious actor to compromise the...
The vulnerability of the DaprPubSubConsumer class in the camel-dapr component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the DaprPubSubConsumer class in the camel-dapr framework of the Apache Camel framework is related to the possibility of bypassing access control mechanisms. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...
The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the IrcProducer class in the camel-irc component of the Apache Camel framework is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality and integrity of th...
Exploit for Improper Input Validation in Apache Camel
camel-kafka kafka.OVERRIDETOPIC Header Injection Reproducer...