CVE Vulnerability Catalog

A permissive cross-domain policy with untrusted domains vulnerability exists in the Apache Camel Jetty component. Setting enableCORS installed Jetty's CrossOriginFilter with stock defaults accepting every origin and allowing credentials, so a page on any origin could make credentialed cross-origin requests and read responses.

An improper input validation vulnerability exists in the Apache Camel Core component. The saga processor consulted a header named Long-Running-Action without a Camel prefix, so an external sender could supply it on an inbound message and name the saga the exchange joined, attaching their request to a long-running action started by someone else.

An improper authentication vulnerability exists in the Apache Camel Keycloak component. The security processor validated the token issuer only when the introspection response contained an iss claim; when absent, the check was skipped rather than treated as a failure, potentially allowing tokens from an unintended issuer to be accepted.

An incorrect default permissions vulnerability exists in the Apache Camel PQC component. When writing generated key material to disk, the component used the process default umask rather than restricting the file to its owner, potentially allowing other local accounts to read the private key.

An exposure of data element to wrong session vulnerability exists in the Apache Camel AS2 component. Signing material for an individual request was stored in state shared across requests, so with multiple trading partners a Message Disposition Notification could be signed with another partner's key.

A vulnerability in the Apache Camel MLLP component causes sensitive information (HL7 message payloads, including patient data) to be written to ordinary application logs. The logPhi option defaulted to true, and two additional code paths logged payload content regardless of its setting. The issue affects Apache Camel versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1.

A vulnerability in the Apache Camel CXF component causes sensitive information to be exposed in SOAP error messages. When a route behind a CXF SOAP consumer fails with an exception not declared in the service contract, exception details (class and package names, message content, and optionally stack trace) are returned to the SOAP client in the faultstring or fault detail. The issue affects Apache Camel versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1.

An improper handling of case sensitivity vulnerability exists in the Apache Camel Platform HTTP component. The guard preventing request header reflection into the response compared header names case sensitively, while HTTP header names are case insensitive, allowing bypass by varying case; under HTTP/2 the suppression was inert for every request.

An improper input validation vulnerability exists in the Apache Camel Tika component. The Tika producer mapped every metadata key parsed from the submitted document onto the Exchange as a header without filtering, allowing attacker-controlled document content to set Camel namespace headers such as CamelFileName.

A race condition vulnerability exists in the Apache Camel PQC component due to concurrent execution using a shared resource with improper synchronization. The producer held a single java.security.Signature instance for every exchange without synchronization, causing interleaved update and verify calls under concurrent traffic.

Improper Certificate Validation vulnerability in Apache Camel Knative component. When SSL was enabled on the Knative HTTP client but no truststore was configured, the client fell back to trusting every presented certificate instead of the JVM's default trust anchors. An attacker positioned on the network path can terminate and read the encrypted connection.

A vulnerability in the Apache Camel Mina component causes sensitive exception details to be sent back to the remote peer when exchange processing fails. Depending on the codec (textline or object), the peer may receive class names, messages, or even the serialized exception with its cause chain, potentially exposing paths, host names, and connection details. The issue affects Apache Camel versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1.

A vulnerability in the Apache Camel Thrift component causes incoming data to be unmarshalled into the shared defaultInstance of the target type rather than a fresh copy. As a result, state from one message remains visible to subsequent messages of the same type, potentially leading to data disclosure between different senders.

Improper validation of the integrity check value in Apache Camel Crypto PGP component. The unmarshal() method verified the modification detection code only for OpenPGP symmetrically encrypted integrity protected data packets, skipping the check for older packets without such code, allowing the sender or a man-in-the-middle to decide whether integrity protection applied.

A vulnerability in the Apache Camel Shiro component skips credential verification when the subject already bound to the current thread carries the same principal as the incoming exchange. Because threads are pooled and reused, a subject left bound by an earlier authenticated exchange can satisfy the check for a later exchange that presents no valid credentials.

A vulnerability in the Apache Camel Knative component causes sensitive exception details to be disclosed in the HTTP response returned to the remote caller. When exchange processing failed on the consumer side, the response body included the exception's class name, message, and stack trace. An external sender could provoke a failure and read internal deployment details such as class and package names, file system or host names, and route structure.

A Cross-Site Request Forgery (CSRF) vulnerability in the Apache Camel OAuth component stems from the authorization code callback not binding or verifying a state parameter tied to the initiating session. An authorization code obtained in any browser could be redeemed at the callback and associated with the presenting session, enabling login CSRF. The same unvalidated callback handling also allowed the post-authentication redirect target to be influenced, resulting in an open redirect from a trusted origin.

A vulnerability in the Apache Camel Platform HTTP Vertx component involves improper CORS handling: the Access-Control-Allow-Credentials: true header is sent regardless of the origin check result, and when camel.server.cors.origins is unset the handler reflects any origin in Access-Control-Allow-Origin. As a result, any page can make credentialed cross-origin requests to the Camel endpoint and read the responses.

A vulnerability in the Apache Camel Docling component allows implicit selection of message body processing mode based on its prefix (http://, https://, / or \), enabling SSRF, path traversal and exposure of sensitive information. The lack of an option to pin the mode and insufficient path validation allow access to remote resources or local files without deployment opt-in.

Apache Answer through 2.0.2 has an incorrect implementation of authentication algorithm vulnerability. A flaw in the User Center login integration can cause a newly created external user session to omit its external identity, allowing subsequent requests to bypass central account suspension or deletion checks until the session expires or is revoked.