AsyncHttpClient (AHC) library's `CookieStore` replaces explicitly defined `Cookie`s

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When making any HTTP request, the automatically enabled and self-managed CookieStore (aka cookie jar) will silently replace explicitly defined Cookies with any that have the same name from the cookie jar. For services that operate with multiple users, this can result in one user's Cookie being used for another user's requests.

N/A

认证机制不恰当

Async Http Client 授权问题漏洞

Async Http Client是AsyncHttpClient开源的适用于Java的异步Http和WebSocket客户端库。 Async Http Client 3.0.0版本存在授权问题漏洞，该漏洞源于自动启用并自管理的CookieStore处理机制，在处理HTTP请求时可能会导致用户间Cookie混淆。

N/A

N/A