-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe security patch adds inbound header filtering to UndertowHeaderFilterStrategy.initialize(). The vulnerability stemmed from this method only setting OUT filter patterns (CAMEL_FILTER_STARTS_WITH) while neglecting IN filters. This allowed malicious headers to bypass validation during request processing. The initialize() method is the root configuration point for header filtering strategies, making it the key vulnerable function visible in component initialization stack traces.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.camel:camel-undertow | maven | >= 4.10.0, < 4.10.3 | 4.10.3 |
| org.apache.camel:camel-undertow | maven | >= 4.8.0, < 4.8.6 | 4.8.6 |
JavaJavaOngoing coverage of React2Shell