Vulnerabilidades de Apache Software Foundation Apache HttpComponents (CVE)

Registros CVE publicados para Apache Software Foundation Apache HttpComponents, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

1 resultados

7.5Alta

CVE-2025-27820 hace 1 año

Apache HttpComponents: PSL (Public Suffix List) validation bypass

Apache Software Foundation Apache HttpComponents

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release