camel-solr: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

A flaw was found in the Apache Camel Solr component. A remote unauthenticated attacker can inject Solr query parameters and document fields into requests by utilizing specific header prefixes SolrParam. and SolrField. that bypass the HTTP header filter. This improper input validation allows for...

CVE-2026-48203

CVE-2026-48203 — camel-solr SolrParam. / SolrField. ヘッダーインジェクション 同じApache Camelの脆弱性に対する実行可能な概念実証リプロデューサーで、ランタイムごとに1つずつ用意されています:...

CVE-2026-48203

The Apache Camel Solr component is vulnerable to Server-Side Request Forgery (SSRF) and injection due to improper input validation. The camel-solr producer copies headers beginning with SolrParam. and SolrField. into Solr request parameters and document fields. Because these prefixes do not start...

CVE-2026-48203: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Improper Input Validation, Server-Side Request Forgery SSRF vulnerability in Apache Camel Solr component. The camel-solr producer copies Exchange message headers whose names begin with the SolrParam...