search

sendgrid / java-http-client

SendGrid's Java HTTP Client for calling APIs
https://sendgrid.com
MIT License
25 stars 78 forks source link

Apache HttpClient have known vulnerabilities #132

Closed akunzai closed 3 years ago

akunzai commented 3 years ago

Issue Summary

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

Technical details: