CVE-2026-46587

camel-couchbase CCB ヘッダーインジェクション再現コード CVE-2026-46587 このプロジェクトは、Apache Camel の camel-couchbase コンポーネントにおけるメッセージヘッダーインジェクション を実証するもので、 CVE-2026-46587 として追跡されています。このコンポーネントは、その動作を制御するために複数の Exchange ヘッダーを読み取ります — CCBKEY （ドキュメントキー）、CCBID（ドキュメントID）、CCBTTL（ドキュメントの有効期限）、CCBDDN（デザインドキュメント名）、CCBVN（ビュー名）。...

The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework allows a attacker to gain read, modify, or delete access to data.

The vulnerability of the CouchbaseProducer class in the camel-couchbase component of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework allows a attacker to gain access to read, modify, or delete data.

The vulnerability of the CouchDbProducer class in the camel-couchbase framework of the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, or delete access to data...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the handling of Exchange headers that are not prefixed with 'Camel', which bypass the HeaderFilterStrategy process. An attacker can override operations b...

GHSA-46JF-C9VX-HH79 Apache Camel-Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

Improper Input Validation vulnerability in Apache Camel. This issue affects Apache Camel: through 4.14.7, from 4.15.0 through 4.18.2, from 4.19.0 through 4.20.0. Users are recommended to upgrade to version 4.14.8, 4.18.3, 4.21.0, which fixes the issue...