CVE-2005-4874

The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a…

published March 28, 2008

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01236 · 68.8th percentile
Published
2008-03-28T23:00Z
EPSS history
Timeline
  • 28 MAR 23:00Z
    The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a…
    cvelistv5