org.asynchttpclient:async-http-client vulnerabilities (Root)
6 vulnerabilities.
-
org.asynchttpclient:async-http-clientRoot AsyncHttpClient: Replay to a different host sends the original host request and credentials to the new host 9.4 Critical -
org.asynchttpclient:async-http-clientRoot AsyncHttpClient: Digest challenge without a usable nonce downgrades to Basic and sends the password in cleartext 8.7 High -
org.asynchttpclient:async-http-clientRoot AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins 7.4 High -
org.asynchttpclient:async-http-clientRoot AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabled 7.5 High -
org.asynchttpclient:async-http-clientRoot AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service 7.5 High -
org.asynchttpclient:async-http-clientRoot async-http-client: Cookie header not stripped on cross-origin redirect 7.4 High