Uploaded image for project: 'HttpComponents HttpClient'
  1. HttpComponents HttpClient
  2. HTTPCLIENT-2072

Security vulnerability with apache commons-code 1.11, upgrade to 1.13

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Duplicate
    • 4.5.12
    • None
    • HttpClient (classic)
    • None
    • Important

    Description

      Apache commons-codec before version “commons-codec-1.13-RC1” is vulnerable to information disclosure due to Improper Input validation.

      See https://github.com/apache/commons-codec/commit/48b615756d1d770091ea3322eefc08011ee8b113

       

       

       

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. HTTPCLIENT-2018 Improper input validation vulnerability in commons-codec version used by latest HttpClient

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. HTTPCLIENT-2150 Update to Apache Commons Codec 1.15

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed

          Activity

            People

              Unassigned Unassigned
              james.holland@outlook.com James Holland
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: