CVE-2023-34442

CVE-2023-34442 concerns Apache Camel (JIRA integration) with information disclosure due to improper authorization validation in the Camel-Jira FileConverter, enabling a local or authenticated actor to view temporary file contents. Affected versions include Camel 3.x up to <=3.14.8, 3.18.x up t...

CVE-2026-46584

CVE-2026-46584 affects Apache Camel’s Mail component. The MailProducer.getSender could read headers from the mail.smtp/mail.smtps namespace and apply them as JavaMail session properties, overriding endpoint config. This allows attacker-controlled inputs to influence SMTP parameters if untrusted i...