VDB
DEBIAN-CVE-2020-13956
DEBIAN-CVE-2020-13956
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | httpcomponents-client | 0 |
| Debian:13 | httpcomponents-client | 0 |
| Debian:12 | httpcomponents-client | 0 |
Timeline
- Dec 2, 2020 CVE Published
- Oct 26, 2026 CVE Updated