CVE-2025-27820

🗓️ 24 Apr 2025 12:06:25Reported by CirclType

circl

circl🔗 cve.circl.lu👁 6 Views

CVE-2025-27820 reported on April 24, 2025, across multiple online platforms.

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, which affects IBM watsonx.data	1 Sep 202514:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Improper Access Control vulnerability in Apache HttpClient [CVE-2025-27820]	28 Aug 202517:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Service Component uses A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team.	9 May 202509:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in httpclient5-5.4.2.jar	11 Jul 202511:33	–	ibm
Atlassian	Third-Party Dependency in Bamboo Data Center and Server	8 Jul 202505:09	–	atlassian
Atlassian	MITM (Man-in-the-Middle) org.apache.httpcomponents.client5:httpclient5 Dependency in Confluence Data Center and Server	2 Jul 202504:09	–	atlassian
Atlassian	MITM (Man-in-the-Middle) org.apache.httpcomponents.client5:httpclient5 Dependency in Jira Software Data Center and Server	5 Jul 202505:09	–	atlassian
BDU FSTEC	The vulnerability of the PSL validation mechanism in the Apache HttpClient client module of Apache HttpComponents allows a attacker to perform a CSRF attack.	28 Apr 202500:00	–	bdu_fstec
Chainguard	CVE-2025-27820 vulnerabilities	26 Apr 202501:14	–	cgr
CNNVD	Apache HttpClient 安全漏洞	24 Apr 202500:00	–	cnnvd

Source	Link
bsky	www.bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnkt4x6vwwb2
bsky	www.bsky.app/profile/cve.skyfleet.blue/post/3lnl2ovjrua2d
bsky	www.bsky.app/profile/getpokemon7.bsky.social/post/3lo7tiuqd6c23
infosec	www.infosec.exchange/users/cR0w/statuses/114393098223959645
t	www.t.me/DarkWebInformer_CVEAlerts/13216
t	www.t.me/cvedetector/23670

24 Apr 2025 12:06Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00745

SSVC

cve 2025-27820 report date online platforms information security vulnerability details