BDU%3A2025-05017 — Vulnetix

BDU%3A2025-05017 PUBLISHED CVSS 7.800000190734863 HIGH

Уязвимость механизма PSL validation клиентского модуля Apache HttpClient средства Apache HttpComponents, позволяющая нарушителю осуществить CSRF-атаку

Risk Scores

CVSS 2.0

7.800000190734863

Affected Products

Vendor	Product	Versions
Apache Software Foundation	HttpClient

Timeline

Apr 28, 2025 CVE Published

References

https://github.com/apache/httpcomponents-client/pull/621 url
https://lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8 url
https://hc.apache.org/httpcomponents-client-5.4.x/index.html url

Open in Interactive Console →