CVE-2026-48204

CVE-2026-48204 — camel-mongodb-gridfs gridfs. ヘッダーインジェクション 同じApache Camelの脆弱性に対する実行可能な概念実証リプロデューサーで、ランタイムごとに1つずつ用意されています:...

The vulnerability of the GridFsProducer class in the camel-mongodb-gridfs component of the Apache Camel framework allows a attacker to gain access to read, modify, and delete data.

The vulnerability of the GridFsProducer class in the camel-mongodb-gridfs component, as well as the camel-atmosphere-websocket framework from the Apache Camel project, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to read...

CVE-2026-48204

Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation to perform from the gridfs.operation Exchange header when the endpoint's operation parameter is not set - which is the...

EUVD-2026-41839

Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation to perform from the gridfs.operation Exchange header when the endpoint's operation parameter is not set - which is the...

CVE-2026-48204

Apache Camel's camel-mongodb-gridfs component is vulnerable to Improper Input Validation and Improper Access Control in versions 4.0.0 to 4.20.9. The GridFsProducer class uses plain strings for control headers (e.g., gridfs.operation, gridfs.objectid) which do not start with the required Camel/ p...

CVE-2026-48204: Improper Input Validation

Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation to perform from the gridfs.operation Exchange header when the endpoint's operation parameter is not set - which is the...

CVE-2026-9100

The MongoDB C Driver's legacy GridFS API accepts malformed file metadata from the database without adequate validation. Crafted documents in a GridFS collection may cause any application that reads those files via the legacy API to either crash via a division-by-zero or silently leak process memo...

PT-2026-42200

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description The legacy GridFS API accepts malformed file metadata from the database without adequate validation. This can lead to applications reading these files experiencing a crash due to a...