Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-13956

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7r82-7xv7-xcpj

Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

gitlab/maven/org.apache.drill/drill-common/CVE-2020-13956

Improper Input Validation Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object and pick the wrong target host for request execution.

gitlab/maven/org.apache.httpcomponents/httpclient/CVE-2020-13956

Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object and pick the wrong target host for request execution.