https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:31:53 +0000 https://cve.radiocsirt.org/vuln/cve-2025-30177 <p><strong>Affected:</strong> Apache Software Foundation Apache Camel</p> <p>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.</p> <p>This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.</p> <p>Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.</p> <p>Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the &#34;out&#34; direction, while it doesn&#39;t filter the &#34;in&#34; direction.</p> <p>This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Camel</p> <p>Bypass/Injection vulnerability in Apache Camel in Camel-Undertow component under particular conditions.</p> <p>This issue affects Apache Camel: from 4.10.0 before 4.10.3, from 4.8.0 before 4.8.6.</p> <p>Users are recommended to upgrade to version 4.10.3 for 4.10.x LTS and 4.8.6 for 4.8.x LTS.</p> <p>Camel undertow component is vulnerable to Camel message header injection, in particular the custom header filter strategy used by the component only filter the &#34;out&#34; direction, while it doesn&#39;t filter the &#34;in&#34; direction.</p> <p>This allows an attacker to include Camel specific headers that for some Camel components can alter the behaviour such as the camel-bean component, or the camel-exec component.</p> https://cve.radiocsirt.org/vuln/cve-2025-30177