{"action":"Upgrade org.apache.httpcomponents:httpclient to 4.1.1 or later.","affected":[{"fixed":"4.1.1","introduced":"4.0.0"}],"component":"org.apache.httpcomponents:httpclient","cve_ids":["CVE-2011-1498"],"ecosystem":"Maven","epss":0.06685,"exploited":false,"fixed_versions":["4.1.1"],"ghsa_id":"GHSA-gw85-4gmf-m7rh","id":"tcs_01M5N8Z30TH5DAY4HYTD90P67D","modified_at":"2024-12-03T06:01:01.943495Z","published_at":"2022-05-17T05:39:03Z","references":["https://osv.dev/vulnerability/GHSA-gw85-4gmf-m7rh","https://nvd.nist.gov/vuln/detail/CVE-2011-1498","https://github.com/apache/httpcomponents-client/commit/a572756592c969affd0ce87885724e74839176fb","https://bugzilla.redhat.com/show_bug.cgi?id=709531","https://github.com/apache/httpcomponents-client","https://issues.apache.org/jira/browse/HTTPCLIENT-1061","http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061440.html","http://marc.info/?l=httpclient-users&m=129853896315461&w=2","http://marc.info/?l=httpclient-users&m=129856318011586&w=2","http://marc.info/?l=httpclient-users&m=129857589129183&w=2","http://marc.info/?l=httpclient-users&m=129858274406594&w=2","http://marc.info/?l=httpclient-users&m=129858299106950&w=2","http://openwall.com/lists/oss-security/2011/04/07/7","http://openwall.com/lists/oss-security/2011/04/08/1","http://securityreason.com/securityalert/8298"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gw85-4gmf-m7rh","url":"https://osv.dev/vulnerability/GHSA-gw85-4gmf-m7rh"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient"}