## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-OSCERD-CVE-2026-46588
# camel-couchdb `CouchDb*` Header Injection Reproducer (CVE-2026-46588)
This project demonstrates a **message-header injection** in Apache Camel's `camel-couchdb` component, tracked as **CVE-2026-46588**. The component reads several Exchange headers to control its behaviour — `CouchDbDatabase`, `CouchDbSeq`, `CouchDbId` (document id), `CouchDbRev` (document revision) and `CouchDbMethod` (the operation method). The string values of these header constants (defined in `CouchDbConstants`) use the `CouchDb` prefix rather than the standard prefix every other component uses. Camel's inbound blocks only header names that begin with / , so these names pass the inbound filter unchanged. When a route exposes an HTTP entry point (for example platform-http) in front of a couchdb producer, an untrusted HTTP client can set these headers directly and .