oss-security - CVE-2022-45046: Apache Camel: LDAP Injection in Camel-LDAP

Message-ID: <aeba3274-b52d-6eb0-2548-4859f2cb55c3@apache.org>
Date: Mon, 05 Dec 2022 12:17:51 +0000
From: Andrea Cosentino <acosentino@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2022-45046: Apache Camel: LDAP Injection in Camel-LDAP 

Description:

LDAP Injection on camel-ldap component when using the filter option.

This issue is being tracked as CAMEL-18696

Credit:

Apache Camel would like to thank 4ra1n from Chaitin Tech

References:

https://camel.apache.org/security/CVE-2022-45046.html

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.