Lucene search
+L

5 matches found

Kitploit
Kitploit
•added 2026/10/11 4:04 a.m.•15 views

CVE-2026-49098

CVE-2026-49098 — Inyección de cabecera kafka.OVERRIDETOPIC de camel-kafka Reproductores de prueba de concepto ejecutables para la misma vulnerabilidad de Apache Camel, uno por runtime: Runtime| Directorio| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 +...

5.3CVSS6.5AI score0.00609EPSS
SaveExploits1References3
OSV
OSV
•added 2026/07/06 8:10 a.m.•18 views

CVE-2026-49098 Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

5.3CVSS6.2AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/07/06 8:10 a.m.•29 views

EUVD-2026-41844

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

6.2AI score0.00609EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/07/06 8:10 a.m.•61 views

CVE-2026-49098 Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP header filter, allowing an HTTP client to redirect Kafka messages to an arbitrary topic

Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Apache Camel Kafka Component. The camel-kafka producer can override its configured target topic at runtime from the kafka.OVERRIDETOPIC Exchange header:...

0.00609EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/07/06 12:00 a.m.•50 views

PT-2026-55905

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection issue exists in the Apache Camel Kafka component due to improper input validation and...

5.3CVSS6.1AI score0.00609EPSS
SaveExploits1References9
Rows per page
Query Builder