Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different
    from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs
    were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL. (CVE-2017-14063)

ID	Name	Product	Family	Severity
422854	SCA: security update for org.asynchttpclient:async-http-client (GHSA-93jq-624g-4p9p)	Tenable Cloud Security	SCA Checks	high
422854	SCA: security update for org.asynchttpclient:async-http-client (GHSA-93jq-624g-4p9p)	Tenable Self-Hosted Container Security	SCA Checks	high

Detections

Analytics

CVE-2017-14063

high

Tenable Plugins

high

high