> CVE-2024-53990

« BACK_TO_HOME
PUBLISHED
2024-12-02 18:15
MODIFIED
2024-12-02 18:15
EPSS (Prob. Exploit)
0.72%
Top 45.8%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When making any HTTP request, the automatically enabled and self-managed CookieStore (aka cookie jar) will silently replace explicitly defined Cookies with any that have the same name from the cookie jar. For services that operate with multiple users, this can result in one user's Cookie being used for another user's requests.

> AFFECTED_PRODUCTS

Red Hat - Red Hat build of Apache Camel 4.8.3 for Spring Boot

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8.3 for Spring Boot security update.
Red Hat build of Apache Camel 4.8.3 for Spring Boot release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vul...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Important

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

AFFECTED PACKAGES:
Unknown / Unknown
159 versions affected
ALIASES:
GHSA-mfj5-cf8g-g2fv

> HISTORIQUE DES MODIFICATIONS

Première apparition
02/12/2024 18:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 14:57
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:29
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Important", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:29
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME