CVE-2026-48203

[Catalogue CVE]

A flaw was found in the Apache Camel Solr component. A remote unauthenticated attacker can inject Solr query parameters and document fields into requests by utilizing specific header prefixes (SolrParam. and SolrField.) that bypass the HTTP header filter. This improper input validation allows for Server-Side Request Forgery (SSRF), enabling the attacker to force the Solr server to make requests to arbitrary URLs, potentially accessing internal services or cloud metadata endpoints. Additionally, attackers can inject arbitrary fields into indexed documents. camel-solr: Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields This vulnerability in the Apache Camel Solr component allows unauthenticated remote attackers to inject arbitrary Solr query parameters and document fields. When an HTTP consumer bridges to a Solr producer in Red Hat build of Apache Camel, the HttpHeaderFilterStrategy fails to block SolrParam.* and SolrField.* headers, enabling server-side request forgery (SSRF) and potential access to internal services or administrative Solr handlers. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Gravité

Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Published

Jul 5, 2026, 10:00:00 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.60% · Oct 27, 2026

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "camel",
      "fixed_version": "4.14.8",
      "applicability_unknown": true
    },
    {
      "name": "camel",
      "fixed_version": "4.18.3",
      "applicability_unknown": true
    },
    {
      "name": "camel",
      "fixed_version": "4.21.0",
      "applicability_unknown": true
    },
    {
      "name": "org.apache.camel:camel-solr",
      "ecosystem": "maven",
      "provider_url": "https://github.com/advisories/GHSA-4h4f-v54q-7pq8",
      "fixed_version": "4.21.0",
      "provider_source": "github",
      "provider_record_id": "GHSA-4H4F-V54Q-7PQ8",
      "provider_updated_at": "2026-08-28T21:52:12Z"
    },
    {
      "name": "camel",
      "ranges": [
        {
          "fixed": "4.21.0",
          "introduced": "4.19.0",
          "last_affected": "",
          "start_excluding": ""
        }
      ],
      "ecosystem": "cpe",
      "provider_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48203",
      "fixed_version": "4.21.0",
      "provider_source": "nvd",
      "provider_record_id": "NVD-CVE-2026-48203",
      "provider_updated_at": "2026-10-25T15:10:00.147"
    }
  ]
}