org.apache.cxf:cxf-rt-rs-security-sso-oidc vulnerabilities

CVEs whose affected-version data names the org.apache.cxf:cxf-rt-rs-security-sso-oidc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-79650Medium· 6.1

3w ago

Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs because attacker-controlled state parameters are preserved and later used as redirect targets …

Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs because attacker-controlled state parameters are preserved and later used as redirect targets …

▾ SunlitApache Software Foundation · org.apache.cxf:cxf-rt-rs-security-sso-oidcEPSS 0.36%via NVD