org.apache.camel:camel-aws2-sqs 4.18.1

Direct Vulnerabilities

Known vulnerabilities in the org.apache.camel:camel-aws2-sqs package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Input Validation Affected versions of this package are vulnerable to Improper Input Validation through `Sqs2HeaderFilterStrategy`. An attacker can inject Camel control headers into an SQS message by sending message attributes such as `CamelHttpUri`, `CamelFileName`, or `CamelSqlQuery` to a consumed queue. Those attributes are copied into the Camel `Exchange` without an inbound header filter, so downstream routes can be steered into using attacker-supplied header values. This can redirect HTTP producers, alter file names, or override query parameters, breaking route behavior and exposing or manipulating data processed by the application. How to fix Improper Input Validation? Upgrade `org.apache.camel:camel-aws2-sqs` to version 4.14.8, 4.18.3, 4.21.0 or higher.	[,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)
M Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') due to the lack of an inbound filter rule in `Sns2HeaderFilterStrategy`. An attacker cannot manipulate internal headers or inject unauthorized data by sending crafted messages, as the component does not support inbound message consumption. This is a defense-in-depth change with no known exploit path. How to fix Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')? Upgrade `org.apache.camel:camel-aws2-sqs` to version 4.14.8, 4.18.3, 4.21.0 or higher.	[,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Vulnerability

Vulnerable Version

Improper Input Validation

Affected versions of this package are vulnerable to Improper Input Validation through Sqs2HeaderFilterStrategy. An attacker can inject Camel control headers into an SQS message by sending message attributes such as CamelHttpUri, CamelFileName, or CamelSqlQuery to a consumed queue. Those attributes are copied into the Camel Exchange without an inbound header filter, so downstream routes can be steered into using attacker-supplied header values. This can redirect HTTP producers, alter file names, or override query parameters, breaking route behavior and exposing or manipulating data processed by the application.

How to fix Improper Input Validation?

Upgrade org.apache.camel:camel-aws2-sqs to version 4.14.8, 4.18.3, 4.21.0 or higher.

[,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')

Affected versions of this package are vulnerable to Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') due to the lack of an inbound filter rule in Sns2HeaderFilterStrategy. An attacker cannot manipulate internal headers or inject unauthorized data by sending crafted messages, as the component does not support inbound message consumption. This is a defense-in-depth change with no known exploit path.

How to fix Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')?

Upgrade org.apache.camel:camel-aws2-sqs to version 4.14.8, 4.18.3, 4.21.0 or higher.

[,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

org.apache.camel:camel-aws2-sqs@4.18.1

latest version

latest non vulnerable version

first published

latest version published

licenses detected

package registry

Direct Vulnerabilities

Fix vulnerabilities automatically