Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/06 8:6 a.m.4 views

CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Improper Input Validation, Server-Side Request Forgery SSRF vulnerability in Apache Camel Solr component. The camel-solr producer copies Exchange message headers whose names begin with the SolrParam...

9.1CVSS6.2AI score0.0037EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/06 8:6 a.m.43 views

CVE-2026-48203 Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Improper Input Validation, Server-Side Request Forgery SSRF vulnerability in Apache Camel Solr component. The camel-solr producer copies Exchange message headers whose names begin with the SolrParam...

0.0037EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.33 views

PT-2026-55899

Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.0.0 through 4.14.7 Apache Camel versions 4.15.0 through 4.18.2 Apache Camel versions 4.19.0 through 4.20.9 Description An injection and Server-Side Request Forgery SSRF issue exists in the Apache Camel Solr component. T...

9.1CVSS6.1AI score0.0037EPSS
SaveExploits0References12
OSV
OSV
added 2024/03/14 5:18 p.m.8 views

CLSA-2024-1710436683 Fix CVE(s): CVE-2023-39804

SECURITY UPDATE: denial of service attack - debian/patches/CVE-2023-39804.patch: Fix handling of extended header prefixes. - CVE-2023-39804...

6.2CVSS6.6AI score0.00283EPSS
SaveExploits0References1
OSV
OSV
added 2024/01/23 4:19 p.m.9 views

CLSA-2024-1706026767 Fix CVE(s): CVE-2023-39804

SECURITY UPDATE: denial of service attack - debian/patches/CVE-2023-39804.patch: Fix handling of extended header prefixes. - CVE-2023-39804.patch...

6.2CVSS6.6AI score0.00283EPSS
SaveExploits0References1
Rows per page
Query Builder