Skip to content
Threat Feed
Subscribe

Product

Apache Camel (4.7.0-4.18.4)

1 brief RSS
high advisory

Apache Camel Template Injection via HTTP Producer Headers

Vulnerabilities in Apache Camel HTTP producers allow unauthenticated users to trigger arbitrary property resolution and bean method invocation via manipulated CamelHttpUri or CamelRestHttpUri headers.

Apache Camel +3 apache camel remote-code-execution information-disclosure template-injection cloud xml-external-entity xxe +2
6t 1c