Org.apache.camel:camel-Aws2-S3 (4.19.0 Before 4.22.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/org.apache.camelcamel-aws2-s3-4.19.0-before-4.22.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 23 Oct 2026 14:58:01 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgApache Camel: Expression Language Injection in Camel-AWS2-S3 (CVE-2026-95664)https://feed.craftedsignal.io/briefs/2026-10-apache-camel-aws2-s3-injection/Fri, 23 Oct 2026 14:58:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-apache-camel-aws2-s3-injection/The Apache Camel AWS2-S3 component is vulnerable to Expression Language Injection. The Camel-AWS2-S3 producer evaluates untrusted S3 object keys from the CamelAwsS3Key header as Simple expressions.The Apache Camel AWS2-S3 component contains an "Improper Neutralization of Special Elements used in an Expression Language Statement" ('Expression Language Injection') vulnerability. The producer evaluates untrusted S3 object keys provided via the CamelAwsS3Key header as Simple expressions.

]]>mediumadvisory