Improper Input Validation

Apache Camel NATS component is vulnerable to Improper Input Validation. The vulnerability is due to NatsConsumer copying unfiltered NATS message headers into the Camel Exchange, allowing an attacker who can publish to the consumed subject to inject Camel control headers and influence downstream...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the NatsConsumer process. An attacker can manipulate downstream producer behavior by injecting arbitrary control headers into messages published to the...