5 matches found
CVE-2026-78164
CVE-2026-78164 — Camel HTTP producers resolve property placeholders on message-supplied URI headers Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the HTTP producer families let an inbound message override the endpoint URI through the CamelHttpUri and CamelRestHttpU...
Improper Neutralization of Special Elements Used in a Template Engine
Overview org.apache.camel:camel-netty-http is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers i...
Improper Neutralization of Special Elements Used in a Template Engine
Overview org.apache.camel:camel-http-common is a versatile open-source integration framework based on known Enterprise Integration Patterns. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the HTTP producer URI helpers ...
Apache Camel code injection vulnerability
Apache Camel versions from 4.0.0 to 4.18.5 and from 4.19.0 to 4.22.1 contain security vulnerabilities. These vulnerabilities stem from the Camel HTTP producer, which allows inbound messages to override endpoint URIs through the CamelHttpUri and CamelRestHttpUri headers. It also parses property...
