CVE-2025-27820 – Apache HttpClient Domain Check Bypass Vulnerability

CVE ID : CVE-2025-27820

Published : April 24, 2025, 12:15 p.m. | 1 hour, 30 minutes ago

Description : A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…CVE ID : CVE-2025-27820

Published : April 24, 2025, 12:15 p.m. | 1 hour, 30 minutes ago

Description : A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…