Vulnerability in Async Http Client Affecting Various Platforms
CVE-2017-14063

7.5HIGH

Key Information:

Vendor: Asynchttpclient Project
Status: Async-http-client
Vendor: CVE Published:; 31 August 2017

🔔 Create Asynchttpclient Project Vulnerability Alert

What is CVE-2017-14063?

A vulnerability exists in Async Http Client that allows an attacker to manipulate the URI fragment identifier. If a '?' character is present, the library may connect to a different host than intended. This could lead to security implications such as man-in-the-middle attacks or data leakage, especially when handling sensitive information. This highlights the importance of rigorous validation in network request processing.