CVE-2026-55994

camel-iggy 用户头注入复现器 CVE-2026-55994 此项目演示 Apache Camel 的 camel-iggy 组件中的消息头注入 漏洞，跟踪编号为 CVE-2026-55994 。Iggy 消费者将入站消息的用户头 复制到 Camel Exchange 而不使用任何HeaderFilterStrategy，因此任何能够向所消费的 Iggy 主题发布消息的人都可以注入 Camel 控制头——特别是 CamelHttpUri： root@kitploit: // IggyFetchRecords.createExchange 受影响版本 4.18.2 — Iggy...

GHSA-PW9Q-PQ7C-RFQW Apache Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy

Improper Input Validation, Exposure of Sensitive Information to an Unauthorized Actor, Server-Side Request Forgery SSRF vulnerability in Apache Camel in Iggy component. The camel-iggy consumer mapped the user-headers of inbound Iggy messages into the Camel Exchange header map without applying any...