Apache Camel camel-neo4j component is vulnerable to cypher injection
Cypher Injection vulnerability in Apache Camel camel-neo4j component. This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0 Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-66169US | — | — | ||
Cypher Injection vulnerability in Apache Camel camel-neo4j component.
This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.1… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2026/01/13/5WEB
- https://camel.apache.org/security/CVE-2025-66169.htmlWEB
- https://github.com/apache/camelPACKAGE
- https://github.com/apache/camel/commit/66715d3feb4ba15df30cffe437e45efeedfba10dWEB
- https://github.com/apache/camel/commit/723e2cd98ce4b4ceb1dd38837bc113fca0cef170WEB
- https://github.com/apache/camel/commit/e46c4c0ef542a64dc791253763a8273dfd7fb179WEB
- https://github.com/apache/camel/pull/20035WEB
- https://github.com/apache/camel/pull/20036WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan