CVE-2020-13956
🔶 mediumSummary
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
CVSS Score
5.3
Medium
EPSS Score
0.5
Exploit Probability
Published Date
2020-12-02
First Seen: 2026-01-05
📊 Relative Risk Intelligence
This CVE is Lower Risk - more severe than 19.7% of all 329,456 vulnerabilities in our database.
#264,595
Below average severity
Severity Percentile
Last Modified
2025-12-01
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N