Not rated
CVE-2025-27820 A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host…
Description
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HttpComponents 5.4 | 5.4.0 → < 5.4.3 | 5.4.3 |
References
- github.com github.com
- github.com github.com
- hc.apache.org hc.apache.org
- lists.apache.org lists.apache.org
Timeline
- Published
- Last modified