Apache HttpClient disables domain checks
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-27820US | — | — | ||
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. F… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/apache/httpcomponents-clientPACKAGE
- https://github.com/apache/httpcomponents-client/pull/574WEB
- https://github.com/apache/httpcomponents-client/pull/621WEB
- https://hc.apache.org/httpcomponents-client-5.4.x/index.htmlWEB
- https://lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-27820ADVISORY
- https://security.netapp.com/advisory/ntap-20250516-0003WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan