Headline
GHSA-w66j-xc7r-m2jv: camel-ldap component allows LDAP Injection when using the filter option
The camel-ldap component allows LDAP Injection when using the filter option. Users are recommended to either move to the Camel-Spring-Ldap component (which is not affected) or upgrade to 3.14.6 or 3.18.4.
camel-ldap component allows LDAP Injection when using the filter option
Moderate severity GitHub Reviewed Published Dec 5, 2022 • Updated Dec 5, 2022
Related news
CVE-2022-45046: Apache Camel Security Advisory - CVE-2022-45046
The camel-ldap component allows LDAP Injection when using the filter option. Users are recommended to either move to the Camel-Spring-Ldap component (which is not affected) or upgrade to 3.14.6 or 3.18.4.