VDB
BDU%3A2025-02723
BDU%3A2025-02723
PUBLISHED
CVSS 5.099999904632568 MEDIUM
Уязвимость компонента Default Header Filtering фреймворка Apache Camel, связанная с недостаточной проверкой регистра, позволяющая нарушителю оказать влияние на целостность, доступность и конфиденциальность защищаемой информации
Risk Scores
CVSS 2.0
5.099999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation | Camel | |
| Apache Software Foundation | Apache Camel | 4.10.0, 3.10.0, 4.8.0 |
Timeline
- Mar 9, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 9, 2025 PoC Published
- Mar 10, 2025 PoC Published
- Mar 10, 2025 PoC Published
- Mar 10, 2025 PoC Published
- Mar 10, 2025 PoC Published
- Mar 10, 2025 PoC Published
- Mar 11, 2025 PoC Published
References
- https://camel.apache.org/security/CVE-2025-27636.html url
- https://github.com/akamai/CVE-2025-27636-Apache-Camel-PoC url
- https://lists.apache.org/thread/l3zcg3vts88bmc7w8172wkgw610y693z vendor-advisory
- https://issues.apache.org/jira/browse/CAMEL-21828 issue
- http://www.openwall.com/lists/oss-security/2025/03/09/1 url
- https://github.com/akamai/CVE-2025-27636-Apache-Camel-PoC/blob/main/src/main/java/com/example/camel/VulnerableCamel.java exploit
- https://camel.apache.org/security/CVE-2025-27636.txt.asc vendor-advisory