Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Camel K

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1

    Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace

    Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerability in custom resource resolution allows a tenant to reference secrets by name in the operator namespace, potentially exposing secrets belonging to ot…

  • High 8.1

    Apache Camel K: Camel K Cross-Namespace Build Deputy Attack

    (Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K. Authorized users in a Kubernetes namespace can create a Build resource, controlling the Pod generation in a …