CyberRota Analysis
AI-GeneratedAn improper neutralization vulnerability in Apache Camel K allows tenant-controlled repository content to influence code execution within the operator pod, potentially enabling arbitrary code execution with operator privileges. This issue affects versions 2.0.0 through 2.9.2 and 2.10.1 prior to 2.10.2. Organizations using affected versions should prioritize upgrading to 2.9.3, 2.10.2, or 2.11.0 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator pod, potentially enabling tenants to execute arbitrary code with the privileges of the operator. This issue affects Apache Camel K: from 2.0.0 before 2.9.3, from 2.10.1 before 2.10.2. Users are recommended to upgrade to version 2.9.3, 2.10.2 or 2.11.0, which fixes the issue.