Description (CNA)
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache HttpComponents | affected 5.4.0 before 5.4.3 |
CWE
No CWE identifiers supplied.
References
- https://github.com/apache/httpcomponents-client/pull/574
- https://github.com/apache/httpcomponents-client/pull/621
- https://hc.apache.org/httpcomponents-client-5.4.x/index.html
- https://lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.