CVE-2026-56139

camel-undertow Rest DSL muteException 堆栈跟踪泄露复现工具 CVE-2026-56139 本项目演示 Apache Camel 的 camel-undertow Rest DSL 消费者中的一个信息泄露 问题，编号为 CVE-2026-56139 。muteException 选项控制是否将未捕获处理异常的详细信息返回给 HTTP 客户端。在普通 undertow 端点上，该选项有效——但 undertow Rest DSL 在创建其响应绑定时将 muteException 硬编码为 false ，并且从不复制所配置的值，因此 muteExcepti...

CVE-2026-78329 Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes

Improper input validation vulnerability in Apache Camel Undertow component. This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed...

CVE-2026-56139

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false,...

CVE-2026-56139

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Undertow Component. The camel-undertow HTTP server consumer exposes a muteException option that controls what is returned to the client when a route processing error occurs. This option defaulted to false,...