CVE-2007-5034

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in…

published September 21, 2007

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02599 · 85.1th percentile
Published
2007-09-21T20:00Z
EPSS history
Timeline
  • 21 SEP 20:00Z
    ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in…
    cvelistv5