CVE-2025-66169: Apache Software Foundation Apache Camel Neo4j

Описание

Оригинално описание

Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

Засегнати продукти

• Apache Software Foundation Apache Camel Neo4j: 4.10.0 преди 4.10.8; 4.14.0 преди 4.14.3; 4.15.0 преди 4.17.0

Вид слабост

• CWE-89 SQL инжекция

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-66169
• https://nvd.nist.gov/vuln/detail/CVE-2025-66169
• https://camel.apache.org/security/CVE-2025-66169.html
• http://www.openwall.com/lists/oss-security/2026/01/13/5