CVE-2026-46456

CVE-2026-46456 — инъекция заголовков входящих атрибутов сообщений в camel-aws2-sqs Готовые к запуску proof-of-concept воспроизведения одной и той же уязвимости Apache Camel, по одному на каждую среду выполнения: Среда выполнения| Каталог| Стек| Перехваченный приёмник| Продемонстрированное...

camel-aws2-sqs: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

A flaw was found in Apache Camel AWS2-SQS Component. This vulnerability allows a remote attacker, with permissions to send messages to a consumed SQS queue, to inject arbitrary Camel control headers into the message exchange. This is due to a missing inbound header filter strategy. The injected...

GHSA-CMC3-HR79-8MMV Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which blocks Camel, breadcrumbId and org.apache.camel. headers being written to t...

Apache Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

The camel-aws2-sqs component map inbound message attributes into the Camel Exchange through a component-specific HeaderFilterStrategy. Sqs2HeaderFilterStrategy configured only an outbound filter setOutFilterPattern, which blocks Camel, breadcrumbId and org.apache.camel. headers being written to t...