https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:08:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05050 bdu:2025-05050 https://cve.radiocsirt.org/vuln/bdu:2025-05050 https://cve.radiocsirt.org/vuln/euvd-2026-226531 EUVD-2026-226531 https://cve.radiocsirt.org/vuln/euvd-2026-226531 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30177 <p>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.</p> <p>This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.</p> <p>Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.</p> <p>Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the &#34;out&#34; direction, while it doesn&#39;t filter the &#34;in&#34; direction.</p> <p>This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.</p> <p>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.</p> <p>This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.</p> <p>Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.</p> <p>Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the &#34;out&#34; direction, while it doesn&#39;t filter the &#34;in&#34; direction.</p> <p>This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-30177 https://cve.radiocsirt.org/vuln/ghsa-vq4p-pchp-6g6v <p><strong>Affected:</strong> Maven: org.apache.camel:camel-undertow</p> <p>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.</p> <p>This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.</p> <p>Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.</p> <p>Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the &#34;out&#34; direction, while it doesn&#39;t filter the &#34;in&#34; direction.</p> <p>This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.</p> <p><strong>Affected:</strong> Maven: org.apache.camel:camel-undertow</p> <p>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.</p> <p>This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.</p> <p>Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.</p> <p>Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the &#34;out&#34; direction, while it doesn&#39;t filter the &#34;in&#34; direction.</p> <p>This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.</p> https://cve.radiocsirt.org/vuln/ghsa-vq4p-pchp-6g6v https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0678 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Camel ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Camel ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0678