Apache HttpClient Public Suffix List Validation Bypass Vulnerability

A vulnerability exists in Apache HttpClient versions 5.4.0 prior to 5.4.3, where a bug in the Public Suffix List (PSL) validation logic disables essential domain checks. This flaw affects cookie management and host name verification, potentially leading to unauthorized access or information disclosure. The issue was discovered by the Apache HttpClient team and is fixed in version 5.4.3.

Impact

Exploitation of this vulnerability bypasses Public Suffix List validation, disrupting cookie management and host name verification. This could result in unauthorized access or information disclosure.

Remediation

Users are advised to upgrade to Apache HttpClient version 5.4.3, which addresses this vulnerability.