Description
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Remediation
References
Related Vulnerabilities
WordPress Plugin WTI Like Post Cross-Site Scripting (1.4.4)
WordPress Plugin Notices Ticker Cross-Site Request Forgery (5.0)
Drupal CVE-2017-6925 Vulnerability (CVE-2017-6925)
phpMyFAQ Authentication Bypass by Capture-replay Vulnerability (CVE-2023-1886)
WordPress Plugin Really Simple Gallery Multiple Vulnerabilities (1.4)