CVE-2026-48203

CVE-2026-48203 — حقن الترويسات SolrParam. / SolrField. في camel-solr مُعيدات إنتاج قابلة للتشغيل PoC لنفس ثغرة Apache Camel، واحدة لكل بيئة تشغيل: بيئة التشغيل| الدليل| الحزمة التقنية ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus|...

camel-solr: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

A flaw was found in the Apache Camel Solr component. A remote unauthenticated attacker can inject Solr query parameters and document fields into requests by utilizing specific header prefixes SolrParam. and SolrField. that bypass the HTTP header filter. This improper input validation allows for...

CVE-2026-48203

The Apache Camel Solr component is vulnerable to Server-Side Request Forgery (SSRF) and injection due to improper input validation. The camel-solr producer copies headers starting with the SolrParam. and SolrField. prefixes into Solr request parameters and document fields. Because these prefixes ...

CVE-2026-48203: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Improper Input Validation, Server-Side Request Forgery SSRF vulnerability in Apache Camel Solr component. The camel-solr producer copies Exchange message headers whose names begin with the SolrParam...