Auth bypass in Asynchttpclient Async-http-client

CVE-2024-53990

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When making any HTTP request, the automatically enabled and self-managed CookieStore (aka cookie jar) wil…

Vulnerability class: Broken Authentication

EPSS: 0.006 (44.2th percentile) — read the EPSS interpretation.