CVE-2025-27820 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apach…
High CVSS: 7.5

CVE-2025-27820

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release
Vendor
Apache
Product
Httpclient
CWE
CWE-295
Yayın Tarihi
2025-04-24 12:15:16
Güncelleme
2025-07-16 14:48:52
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-295 Httpclient HIGH Apache 2025

Referanslar

https://github.com/apache/httpcomponents-client/pull/574 https://github.com/apache/httpcomponents-client/pull/621 https://hc.apache.org/httpcomponents-client-5.4.x/index.html https://lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8 https://security.netapp.com/advisory/ntap-20250516-0003/