Vulnerability	Vulnerable Version
M Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') due to the lack of an inbound filter rule in `Sns2HeaderFilterStrategy`. An attacker cannot manipulate internal headers or inject unauthorized data by sending crafted messages, as the component does not support inbound message consumption. This is a defense-in-depth change with no known exploit path. How to fix Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')? Upgrade `org.apache.camel:camel-aws2-sns` to version 4.14.8, 4.18.3, 4.21.0 or higher.	[,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') due to the lack of an inbound filter rule in Sns2HeaderFilterStrategy. An attacker cannot manipulate internal headers or inject unauthorized data by sending crafted messages, as the component does not support inbound message consumption. This is a defense-in-depth change with no known exploit path.

How to fix Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')?

Upgrade org.apache.camel:camel-aws2-sns to version 4.14.8, 4.18.3, 4.21.0 or higher.

[,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Go back to all versions of this package