CVE-2025-27820: apache software foundation apache httpcomponents Improper Certificate Validation
CVSS: 7.5v3.1HighAnalyzed
AliasesUBUNTU-CVE-2025-27820CGA-hv7f-m3g2-6gg9CGA-v4pq-q7hw-9qmwCGA-7xx5-p43h-w55qCGA-fw47-3fg9-p7h6CGA-mjpq-q7h8-5rm7GHSA-73m2-qfq3-56cxCGA-vpxv-9m8v-c76p
Published 24-04-2025Last modified 04-06-2025
Vulnerability summary
CVE-2025-27820 is a high (CVSS 7.5) Improper Certificate Validation vulnerability in apache software foundation apache httpcomponents. EPSS estimates a 0.95% chance of exploitation in the next 30 days, higher than 60.5% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (CVE.org)EPSS score
0.95%
0%100%
Low · +0.07 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 24-04-2025PublishedVulnerability first disclosed.
- 04-06-2025Last modifiedVulnerability information updated.
Description
A bug in PSL validation logic in Apache HttpClient 5.4.x disables domain checks, affecting cookie management and host name verification. Discovered by the Apache HttpClient team. Fixed in the 5.4.3 release
CVSS metrics
6 scores · 6 sources · 1 versionHigh 7.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NSourcesAll 6 agree
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · WolfiEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · ChainguardEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- OSV · MavenEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS trend
Probability
0.95%
Chance of exploitation in the next 30 days
Percentile
61%
Versus all other CVEs
30-day change
+0.07 pp
From 0.88% on 19-09-2026
19-09-202619-10-2026
EPSS score0.95%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard3 products
- camunda-zeebe-8.6< 8.6.13-r1
- camunda-zeebe-8.6-compat< 8.6.13-r1
- opensearch-2< 2.19.4-r0
Apache1 product
- httpclient≥ 5.4, < 5.4.3
Apache software foundation1 product
- apache httpcomponents≥ 5.4.0, < 5.4.3
Netapp1 product
Org.apache.httpcomponents.client51 product
- httpclient5≥ 5.4-alpha1, < 5.4.3
Ubuntu1 product
- httpcomponents-clientAll versions (No fix recorded)
Wolfi1 product
- opensearch-2< 2.19.4-r0
7 vendors · 9 products
References
11 links- lists.apache.org/thread/55xhs40ncqv97qvoocok44995xp5kqn8Vendor AdvisoryREPORTAdvisoryWEBMailing ListPatch
