Skip to content
Threat Feed
Subscribe

Tag

Xml-External-Entity

2 briefs RSS
high advisory

Apache Camel Template Injection via HTTP Producer Headers

Vulnerabilities in Apache Camel HTTP producers allow unauthenticated users to trigger arbitrary property resolution and bean method invocation via manipulated CamelHttpUri or CamelRestHttpUri headers.

Apache Camel +4 apache camel remote-code-execution information-disclosure template-injection cloud xml-external-entity xxe +2
6t 4c updated
high advisory

veraPDF Validation Module XML External Entity Injection Vulnerability (CVE-2026-54079)

A critical XML External Entity Injection (XXE) vulnerability, CVE-2026-54079, in veraPDF's validation-model module allows a remote attacker to read arbitrary files on the server file system or perform Server-Side Request Forgery (SSRF) by submitting a crafted PDF containing a malicious XFA stream, due to insecure XML parsing defaults.

veraPDF validation-model +3 xxe xml-external-entity pdf server-side-request-forgery vulnerability
4t