Search for packages
| purl | pkg:maven/org.apache.httpcomponents/httpclient@4.3.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-cfh5-3ghh-wfjx
Aliases: CVE-2014-3577 |
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not … |
Vulnerable |
|
GHSA-fmj5-wv96-r2ch
Aliases: CVE-2015-5262 |
Denial of service vulnerability in org.apache.httpcomponents:httpclient http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an … |
Vulnerable |
|
GHSA-7r82-7xv7-xcpj
Aliases: CVE-2020-13956 |
Cross-site scripting in Apache HttpClient Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in … |
Not vulnerable |
|
CVE-2020-13956
|
Improper Authorization Apache HttpClient versions can misinterpret malformed authority component in request URIs passed to the library as `java.net.URI` object … |
Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-pqwh-44jj-p5rm
|
Hostname verification in Apache HttpClient 4.3 was disabled by default http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure … |
CVE-2013-4366
|