Description

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Remediation

References

CVE-2020-13956

Related Vulnerabilities

Java Unspesificed Vulnerability (CVE-2019-2422)

WordPress Plugin Woo Import Export Arbitrary File Deletion (1.0)

WordPress Plugin User Rights Access Manager Security Bypass (1.0.3)

WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.10)

WordPress Plugin WP Mail Logging Security Bypass (1.11.2)

Severity

Medium

Classification

CVE-2020-13956 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities