Uploaded image for project: 'Camel'
  1. Camel
  2. CAMEL-11269

URISupport sanitizeUri partial support for RAW()

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.19.0
    • 2.17.7, 2.18.4, 2.19.1, 2.20.0
    • camel-core
    • None

    Description

      The usage of & symbol in a password wrapped by RAW() function breaks the masking of the password.

      The result of this is a partial leak of the clear text password.

      See this example:

      password=RAW(abc&SUFFIX) is translated into password=xxxxxx&SUFFIX

      Attachments

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            paolo.antinori Paolo Antinori
            paolo.antinori Paolo Antinori
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment