{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/camel-quarkus-platform-http--3.40.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":4.8,"id":"CVE-2026-85316"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["camel-platform-http (\u003c 4.18.5, 4.19.0 to \u003c 4.22.1)","camel-quarkus-platform-http (\u003c 3.40.0)"],"_cs_severities":["low"],"_cs_tags":["camel-platform-http","request-forgery","ssrf","cve-2026-85316"],"_cs_type":"advisory","_cs_vendors":["Apache"],"content_html":"\u003cp\u003eCVE-2026-85316 is a request forgery vulnerability in the \u003ccode\u003ecamel-platform-http\u003c/code\u003e component. The vulnerability is caused by an incorrect implementation of proxy mode identification, where the library evaluates if an endpoint is a proxy by checking if the configured path starts with the string \u0026quot;proxy\u0026quot; instead of requiring an exact match.\u003c/p\u003e\n\u003cp\u003eEndpoints with paths starting with \u0026quot;proxy\u0026quot; (e.g., \u0026quot;proxyStats\u0026quot;, \u0026quot;proxy-health\u0026quot;) are incorrectly forced into proxy mode. In this mode, the endpoint acts as a forwarding proxy that uses the client-provided \u0026quot;Host\u0026quot; header to determine its destination. This behavior exposes internal services or resources that the application server can reach.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for request forgery, where an attacker can proxy requests through the vulnerable endpoint to reach internal network resources. The severity is mitigated by the need for the application to have existing routes with paths starting with \u0026quot;proxy\u0026quot; that were not intended to serve as proxies.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003ecamel-platform-http\u003c/code\u003e to version 4.18.5, 4.22.1, or 4.23.0.\u003c/li\u003e\n\u003cli\u003eUpgrade \u003ccode\u003ecamel-quarkus-platform-http\u003c/code\u003e to version 3.40.0 or later.\u003c/li\u003e\n\u003cli\u003eIf upgrading is not immediately possible, identify all \u003ccode\u003eplatform-http\u003c/code\u003e endpoints with paths starting with \u0026quot;proxy\u0026quot; that are not intended to act as proxies and rename these paths to avoid the prefix conflict.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-21T10:17:47Z","date_published":"2026-10-21T10:17:47Z","id":"https://feed.craftedsignal.io/briefs/2026-10-camel-proxy-rce/","summary":"An unintended proxy mode classification in Apache Camel via prefix matching allows unauthenticated request forgery, potentially exposing internal services to unauthorized access.","title":"Apache Camel: Request forgery vulnerability in camel-platform-http (CVE-2026-85316)","url":"https://feed.craftedsignal.io/briefs/2026-10-camel-proxy-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Camel-Quarkus-Platform-Http (\u003c 3.40.0)","version":"https://jsonfeed.org/version/1.1"}