Vulnerability	Vulnerable Version
H Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the improper handling of HTTP headers with the `SolrParam.` and `SolrField.` prefixes. An attacker can manipulate Solr query parameters or inject arbitrary document fields by sending specially crafted HTTP requests, potentially causing the server to make requests to attacker-controlled URLs or alter indexed data. This is only exploitable if an HTTP consumer is bridged to a solr: producer and the consumer is unauthenticated. How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')? Upgrade `org.apache.camel:camel-solr` to version 4.14.8, 4.18.3, 4.21.0 or higher.	[4.0.0,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the improper handling of HTTP headers with the SolrParam. and SolrField. prefixes. An attacker can manipulate Solr query parameters or inject arbitrary document fields by sending specially crafted HTTP requests, potentially causing the server to make requests to attacker-controlled URLs or alter indexed data. This is only exploitable if an HTTP consumer is bridged to a solr: producer and the consumer is unauthenticated.

How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')?

Upgrade org.apache.camel:camel-solr to version 4.14.8, 4.18.3, 4.21.0 or higher.

[4.0.0,4.14.8)[4.15.0,4.18.3)[4.19.0,4.21.0)

Go back to all versions of this package