Skip to content
OpenAdvisories

Package · Maven

org.apache.camel:camel-cxf-rest

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-46592 Public exploit

    Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filter, allowing an HTTP client to redirect the invoked SOAP operation

    Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP component. The camel-cxf producer selects which SOAP operation to invoke on the backend service from the operationName (and operationNamespa…

    Apache Software Foundation Apache Camel org.apache.camel:camel-cxf-rest org.apache.camel:camel-cxf-soap Maven
  • Critical 9.8
    CVE-2026-47323 Public exploit EPSS 20%

    Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering

    Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in camel-cxf-rest, CxfHeaderFilterStrategy in camel-cxf-transport, and KnativeHttpHeaderFilt…

    Apache Software Foundation Apache Camel org.apache.camel:camel-cxf-rest Maven