Apache Camel’s AS2 component allows a remote AS2 sender to supply an arbitrary asynchronous Message Disposition Notification (MDN) delivery address. The component then uses that address verbatim, creating a server‑side request forgery that can reach internal hosts only accessible from the deployment. If the Camel AS2 receiver has credentials configured for MDN delivery, those credentials are sent to the attacker‑specified endpoint, resulting in credential disclosure. The CVSS score of 8.2 indicates high severity.

The vulnerability affects Apache Camel versions from 4.0.0 up to and including 4.18.4, from 4.19.0 up to 4.21.x, and from 4.22.0 up to 4.22.0. Users on the 4.18.x LTS stream must upgrade to 4.18.5; those on the 4.22.x LTS stream to 4.22.1; and all users should move to Apache Camel 4.23.0 for the upstream fix.

With a CVSS score of 8.2 but no available EPSS value, the exploitation probability is not quantified; the vulnerability is not yet listed in CISA’s KEV catalog. The attack vector requires a partner to send an AS2 message with a crafted MDN URL. Successful exploitation allows the attacker to coerce the Camel server into connecting to arbitrary hosts, including internal systems, and to transmit credentials that the server holds for MDN delivery. While the attack is limited to AS2 receivers, its impact on confidentiality and integrity of internal services is substantial.