CVE-2020-13956
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick…
Published: 2020-12-02 · CVSS: 5.3 · CVSS 3.1
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7