CVE-2021-38165

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in…

published August 7, 2021

CVSS
—
EPSS
4%
Percentile
90.4
In the wild
Unconfirmed
What it is

Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03944 · 90.4th percentile
Published
2021-08-07T17:33Z
EPSS history
Timeline
  • 07 AUG 17:33Z
    Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in…
    cvelistv5