Lucene search
+L

3 matches found

OSV
OSV
added 2026/07/06 9:30 a.m.11 views

GHSA-MM84-QVJH-HCJ7 Apache Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

5.3CVSS6.2AI score0.00609EPSS
SaveExploits1References14
EUVD
EUVD
added 2026/07/06 8:10 a.m.21 views

EUVD-2026-41844

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

6.1AI score0.00609EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2026/07/06 8:10 a.m.23 views

CVE-2026-49098

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

6.1AI score0.00609EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder