Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2025-27820

Description

A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release

POC

Reference

No PoCs from references.

Github

- https://github.com/11notes/docker-unifi

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/fkie-cad/nvd-json-data-feeds

- https://github.com/phax/ph-web