Vulnerability	Vulnerable Version
M Improperly Controlled Modification of Dynamically-Determined Object Attributes Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the `kafka.OVERRIDE_TOPIC` and other `kafka.*` headers that bypass the upstream HTTP header filter. An attacker can redirect messages to arbitrary Kafka topics or inject crafted messages into sensitive topics by supplying specially crafted HTTP headers. This is only exploitable if an HTTP consumer is bridged to a Kafka producer and the HTTP endpoint is unauthenticated. How to fix Improperly Controlled Modification of Dynamically-Determined Object Attributes? Upgrade `org.apache.camel:camel-kafka` to version 4.14.8, 4.18.3, 4.21.0 or higher.	[4.0.0,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the kafka.OVERRIDE_TOPIC and other kafka.* headers that bypass the upstream HTTP header filter. An attacker can redirect messages to arbitrary Kafka topics or inject crafted messages into sensitive topics by supplying specially crafted HTTP headers. This is only exploitable if an HTTP consumer is bridged to a Kafka producer and the HTTP endpoint is unauthenticated.

How to fix Improperly Controlled Modification of Dynamically-Determined Object Attributes?

Upgrade org.apache.camel:camel-kafka to version 4.14.8, 4.18.3, 4.21.0 or higher.

[4.0.0,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Go back to all versions of this package