Andrea Cosentino

Apache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir

Apache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled

Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService

Apache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB

Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder

Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation

Apache IoTDB: Path Traversal in Pipe File Transfer Receiver

Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPC