CVE-2007-5034
Medium
Description
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.
SeverityMedium
CVSS4.3
Exploit probability—
ProductElinks
PublishedSep 21, 2007
First seenSep 21, 2007
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| elinks elinks | v ≤ 0.11.1, v ≤ 0.11.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.