Apache Software Foundation Apache HttpComponents vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache HttpComponents, newest first. Follow to get an email when a new one appears.

1 results

7.5High

CVE-2025-27820 1 year ago

Apache HttpComponents: PSL (Public Suffix List) validation bypass

Apache Software Foundation Apache HttpComponents

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release