← Database

CVE-2025-27820

HIGH CVSS: 7.5 Published: 2025-04-24 Modified: 2026-06-17

Description

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release

Affected Platforms

Apache HttpclientNetapp Ontap Tools

Weakness Type

CWE-295

References