CVE-2017-14063

CVE-2017-14063 is a vulnerability in Async Http Client (versions prior to 2.0.35) that allows an attacker to redirect connections to an unintended host by manipulating the fragment identifier with a '?' character. This high-severity vulnerability (CVSS 7.5) has a network attack vector and low complexity, potentially leading to high integrity impact without requiring user interaction. While no active exploitation, public exploit code, or significant community discussion has been observed, the flaw could enable various attacks such as bypassing security controls or facilitating phishing.