You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Dec 4, 2023. It is now read-only.
Is your feature request related to a problem? Please describe.
Apache httpclient before 4.5.3 are vulnerable to Directory Traversal. The user-provided path was able to override the specified host, resulting in giving network access to a sensitive environment.
Describe the solution you'd like
Upgrade to version org.apache.httpcomponents:httpclient:4.5.3
Additional context
This was filed based on a component governance alert we received in ADO (#2785513). Please reach out to brianem or brandom Microsoft (@microsoft) and we can link you directly.
Is your feature request related to a problem? Please describe.
Apache httpclient before 4.5.3 are vulnerable to Directory Traversal. The user-provided path was able to override the specified host, resulting in giving network access to a sensitive environment.
Describe the solution you'd like
Upgrade to version org.apache.httpcomponents:httpclient:4.5.3
Additional context
This was filed based on a component governance alert we received in ADO (#2785513). Please reach out to brianem or brandom Microsoft (@microsoft) and we can link you directly.
https://issues.apache.org/jira/browse/HTTPCLIENT-1803
apache/httpcomponents-client@0554271