Search for packages
| purl | pkg:maven/org.apache.httpcomponents/httpclient@4.1.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2x83-r56g-cv47
Aliases: CVE-2012-6153 |
Improper certificate validation in org.apache.httpcomponents:httpclient http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname … |
Vulnerable |
|
GHSA-cfh5-3ghh-wfjx
Aliases: CVE-2014-3577 |
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not … |
Vulnerable |
|
GHSA-fmj5-wv96-r2ch
Aliases: CVE-2015-5262 |
Denial of service vulnerability in org.apache.httpcomponents:httpclient http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an … |
Vulnerable |
|
GHSA-7r82-7xv7-xcpj
Aliases: CVE-2020-13956 |
Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in … |
Not vulnerable |
|
CVE-2020-13956
|
Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2011-1498
|
Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to … |