| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.httpcomponents.client5:httpclient5 | ≥ 5.4-alpha1, < 5.4.3 | 5.4.3 |
| httpclient | ≥ 5.4, < 5.4.3 | 5.4.3 |
| ontap tools | = 10 |
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free