CVE-2025-27636 – Remote Code Execution in Apache Camel via C...

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://www.offsec.com/blog/cve-2025-27636/
• Blog Title: CVE-2025-27636 – Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypass
• Suggested Section: generic-hacking/http-header-filter-bypass

🎯 Content Summary

CVE-2025-27636: Apache Camel Exec Component Remote Code Execution

Overview

CVE-2025-27636 is a medium-severity (CVSS:3.1/5.6, EPSS:35.5%) remote code execution vulnerability in Apache Camel’s exec component affecting versions 3.10.0–3.22.3, 4.8.0–4.8.4, and 4.10.0–4.10.1. Published on March 19, 2025, it was patched in Camel 3.22.4, 4.8.5, and 4.10.2...

🔧 Technical Details

An attacker injects or uploads a malicious Apache Camel XML route definition that registers the Command Center exec endpoint (e.g., in Camel’s XML DSL:

<route id="cmd"> <from uri="rest:get:command-center"/> <to uri="exec:..."/> </route>

), enabling HTTP-triggered execution of OS commands.

By sending HTTP headers with mixed-case names matching sensitive parameters (for example, using CAmelExecCommandExecutable and CAm...

🤖 Agent Actions

Added a new section on HTTP header name casing bypasses—illustrated with CVE-2025-27636 (Apache Camel exec RCE)—to the “Special HTTP headers” page.

Key updates:
• Explained the technique, abuse workflow, detection & mitigations
• Provided a practical curl PoC for the Camel vulnerability
• Restored “## References” header and appended the OffSec blog reference

This enriches the header-manipulation content and documents an important real-world case-sensitive filtering bypass.

✅ Review Checklist

• Content is technically accurate
• Formatting follows HackTricks style guidelines
• Links and references are working
• Content adds educational value
• No sensitive information is exposed

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

📚 Repository Maintenance

• MD files processed: 848
• MD files fixed: 2

All .md files have been checked for proper formatting (headers, includes, etc.).

[carlospolop]

🔗 Additional Context

Original Blog Post: https://www.offsec.com/blog/cve-2025-27636/

Content Categories: Based on the analysis, this content was categorized under "generic-hacking/http-header-filter-bypass".

Repository Maintenance:

• MD Files Formatting: 848 files processed (2 files fixed)

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0

[carlospolop]

merge