Apache Software Foundation Apache Httpcomponents vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_httpcomponents.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-27820HIGHCVSS 7.5≥ 5.4.0, < 5.4.32025-04-24

CVE-2025-27820 [HIGH] CWE-295 CVE-2025-27820: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie ma A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release