CVE-2026-48204

CVE-2026-48204 — camel-mongodb-gridfs gridfs. 헤더 주입 동일한 Apache Camel 취약점에 대한 실행 가능한 개념 증명 재현기reproducer로, 런타임별로 하나씩 제공됩니다: 런타임| 디렉터리| 스택 ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2 Camel Quarkus| camel-quarkus/| Quarkus 3.36.0 + Camel Quarkus...

The vulnerability of the GridFsProducer class in the camel-mongodb-gridfs component of the Apache Camel framework allows a attacker to gain access to read, modify, and delete data.

The vulnerability of the GridFsProducer class in the camel-mongodb-gridfs component, as well as the camel-atmosphere-websocket framework from the Apache Camel project, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to read...

CVE-2026-48204: Improper Input Validation

Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel Mongodb Gridfs component. The camel-mongodb-gridfs producer selects the GridFS operation to perform from the gridfs.operation Exchange header when the endpoint's operation parameter is not set - which is the...