CVE-2026-48206

A flaw was found in the Apache Camel JIRA component. Due to improper input validation, non-Camel-prefixed Exchange header constants can bypass the HTTP header filter. This allows a remote attacker, potentially unauthenticated, to supply specific headers and override intended values. Consequently,...

CVE-2026-49099

The Apache Camel Salesforce Component is vulnerable to SOQL query override and broken access control (CWE-74, CWE-639) due to improper header handling. The AbstractSalesforceProcessor.getParameter() method prioritizes Exchange message headers over endpoint configurations. Because certain control ...

CVE-2026-48206 Apache Camel JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured credentials

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel JIRA component. The camel-jira producers read their operation parameters - the issue key, project key, transition id, summary, type, assignee, components, watchers, link type, work-log minute...

CVE-2026-48206 Apache Camel JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the endpoint's configured credentials

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel JIRA component. The camel-jira producers read their operation parameters - the issue key, project key, transition id, summary, type, assignee, components, watchers, link type, work-log minute...

CVE-2026-48205

The Apache Camel DNS component is vulnerable to Server-Side Request Forgery (SSRF) via DNS due to improper input validation in the camel-dns producers. The component reads operation parameters (resolver, name, domain, record type, class, and search term) from Exchange headers using plain strings ...