CVE-2026-84178

A flaw was found in Apache Camel's OAuth component. The authorization code callback endpoint fails to verify a state parameter binding the authorization request to the user's session. A remote attacker can exploit this vulnerability to perform a login Cross-Site Request Forgery CSRF attack,...