CGA-6936-26rm-54qh

Published

Last updated

https://images.chainguard.dev/security/CGA-6936-26rm-54qh

Package

elasticsearch-7

Latest Update

Fixed

Fixed Version

7.17.14-r2

Aliases

Severity

5.3

Medium

CVSS V3

Summary

Cross-site scripting in Apache HttpClient

Description

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-6936-26rm-54qh

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources