Non notée
CVE-2025-27820 A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host…
Description
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache HttpComponents 5.4 | 5.4.0 → < 5.4.3 | 5.4.3 |
Références
- github.com github.com
- github.com github.com
- hc.apache.org hc.apache.org
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification