Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade maven-openjdk8Upgrade httpcomponents-clientUpgrade maven-resolver-implUpgrade jansi-nativeUpgrade apache-commons-ioUpgrade maven-resolver-spiUpgrade apache-commons-cliUpgrade maven-openjdk11Upgrade maven-resolverUpgrade maven-resolver-utilUpgrade maven-resolver-apiUpgrade atinjectUpgrade glassfish-el-apiUpgrade maven-shared-utilsUpgrade plexus-containers-component-annotationsUpgrade maven-wagon-http-sharedUpgrade sisu-plexusUpgrade google-guiceUpgrade guava20Upgrade jansiUpgrade maven-wagon-httpUpgrade jboss-interceptors-1.2-apiUpgrade plexus-cipherUpgrade apache-commons-loggingUpgrade maven-wagonUpgrade apache-commons-codecUpgrade plexus-sec-dispatcherUpgrade maven-resolver-transport-wagonUpgrade sisu-injectUpgrade jsoupUpgrade maven-openjdk17Upgrade cdi-apiUpgrade httpcomponents-coreUpgrade plexus-interpolationUpgrade plexus-utilsUpgrade maven-libUpgrade slf4jUpgrade apache-commons-lang3Upgrade maven-wagon-provider-apiUpgrade jsr-305Upgrade jcl-over-slf4jUpgrade geronimo-annotationUpgrade guavaUpgrade mavenUpgrade plexus-classworldsUpgrade hawtjni-runtimeUpgrade aopallianceUpgrade maven-resolver-connector-basicUpgrade sisuUpgrade maven-wagon-file | May 13, 2022 | Dec 2, 2020 |
| Amazon Linux Ami 2 | — | Upgrade httpcomponents-client-javadocUpgrade httpcomponents-client | Feb 23, 2023 | Dec 2, 2020 |
| Centos_linux | — | Upgrade maven-resolver-transport-wagonUpgrade maven-openjdk11Upgrade apache-commons-lang3Upgrade apache-commons-cliUpgrade maven-resolver-utilUpgrade plexus-cipherUpgrade slf4jUpgrade apache-commons-loggingUpgrade apache-commons-codecUpgrade hawtjni-runtimeUpgrade maven-resolver-connector-basicUpgrade httpcomponents-clientUpgrade cdi-apiUpgrade jansiUpgrade maven-openjdk8Upgrade jansi-nativeUpgrade sisuUpgrade maven-openjdk17Upgrade guava20Upgrade sisu-plexusUpgrade maven-wagon-fileUpgrade plexus-containers-component-annotationsUpgrade plexus-sec-dispatcherUpgrade maven-resolver-apiUpgrade maven-wagonUpgrade maven-shared-utilsUpgrade apache-commons-ioUpgrade plexus-utilsUpgrade maven-wagon-http-sharedUpgrade maven-libUpgrade httpcomponents-coreUpgrade maven-wagon-provider-apiUpgrade plexus-classworldsUpgrade maven-resolver-implUpgrade jcl-over-slf4jUpgrade maven-resolver-spiUpgrade mavenUpgrade maven-wagon-httpUpgrade aopallianceUpgrade sisu-injectUpgrade jsr-305Upgrade maven-resolverUpgrade google-guiceUpgrade glassfish-el-apiUpgrade atinjectUpgrade plexus-interpolationUpgrade jboss-interceptors-1.2-apiUpgrade guavaUpgrade jsoupUpgrade geronimo-annotation | May 13, 2022 | Dec 2, 2020 |
| Debian | — | Upgrade httpcomponents-client | Oct 13, 2020 | Oct 13, 2020 |
| Freebsd | — | Upgrade jakarta-commons-httpclientUpgrade httpclientUpgrade apache-commons-httpclientUpgrade maven | Nov 4, 2022 | Apr 19, 2021 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33727616 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 33727619 for version 14.1.1.0.0. | Feb 28, 2022 | Dec 2, 2020 |
| Oracle_linux | — | Upgrade httpcomponents-clientUpgrade plexus-utilsUpgrade glassfish-el-apiUpgrade slf4jUpgrade apache-commons-codecUpgrade aopallianceUpgrade jcl-over-slf4jUpgrade maven-wagon-http-sharedUpgrade plexus-cipherUpgrade maven-resolver-transport-wagonUpgrade maven-openjdk17Upgrade maven-wagon-provider-apiUpgrade mavenUpgrade jsoupUpgrade maven-resolver-utilUpgrade guava20Upgrade plexus-classworldsUpgrade google-guiceUpgrade guavaUpgrade maven-shared-utilsUpgrade jboss-interceptors-1.2-apiUpgrade maven-resolver-implUpgrade maven-resolver-connector-basicUpgrade cdi-apiUpgrade atinjectUpgrade maven-wagon-fileUpgrade apache-commons-ioUpgrade plexus-interpolationUpgrade apache-commons-lang3Upgrade maven-wagon-httpUpgrade plexus-containers-component-annotationsUpgrade jansiUpgrade sisu-injectUpgrade maven-openjdk11Upgrade jansi-nativeUpgrade hawtjni-runtimeUpgrade sisu-plexusUpgrade sisuUpgrade plexus-sec-dispatcherUpgrade jsr-305Upgrade apache-commons-cliUpgrade maven-resolver-spiUpgrade geronimo-annotationUpgrade maven-wagonUpgrade maven-openjdk8Upgrade httpcomponents-coreUpgrade maven-resolverUpgrade maven-libUpgrade apache-commons-loggingUpgrade maven-resolver-api | May 18, 2022 | Oct 8, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Oct 8, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Dec 2, 2020 |
| Redhat_linux | — | Upgrade maven-openjdk17Upgrade jcl-over-slf4jUpgrade guava20Upgrade aopallianceUpgrade maven-resolver-utilUpgrade hawtjni-runtimeUpgrade maven-shared-utilsUpgrade plexus-classworldsUpgrade glassfish-el-apiUpgrade guavaUpgrade maven-resolver-implUpgrade maven-resolver-transport-wagonUpgrade google-guiceUpgrade httpcomponents-clientUpgrade sisu-plexusUpgrade cdi-apiUpgrade apache-commons-codecUpgrade jsoupUpgrade maven-wagon-http-sharedUpgrade mavenUpgrade maven-resolver-connector-basicUpgrade maven-resolverUpgrade maven-openjdk8Upgrade jboss-interceptors-1.2-apiUpgrade geronimo-annotationUpgrade plexus-interpolationUpgrade apache-commons-ioUpgrade maven-openjdk11Upgrade maven-libUpgrade plexus-cipherNo solution existsUpgrade maven-wagonUpgrade apache-commons-lang3Upgrade apache-commons-loggingUpgrade sisu-injectUpgrade httpcomponents-coreUpgrade jansiUpgrade apache-commons-cliUpgrade maven-wagon-httpUpgrade sisuUpgrade maven-wagon-fileUpgrade maven-wagon-provider-apiUpgrade plexus-containers-component-annotationsUpgrade atinjectUpgrade maven-resolver-spiUpgrade plexus-utilsUpgrade slf4jUpgrade maven-resolver-apiUpgrade jsr-305Upgrade jansi-nativeUpgrade plexus-sec-dispatcher | May 13, 2022 | Dec 2, 2020 |
| Rocky_linux | — | Upgrade jansi-native | Mar 5, 2024 | Dec 2, 2020 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.2Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.1.5 | Sep 30, 2025 | Dec 2, 2020 |
| Suse | — | Upgrade maven-libUpgrade maven | Aug 9, 2024 | Dec 2, 2020 |
| Ubuntu | — | Upgrade libhttpclient-java (Ubuntu Pro) | Mar 22, 2023 | Dec 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub