/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2020-13956

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2020-13956

Severity

5.3

Medium

CVSS V3

Description

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing