CVE-2003-0459
KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote web sites to steal the credentials for pages that link to the sites.
- EPSS
- 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kde:konqueror
- kde:konqueror_embedded
- redhat:analog_real-time_synthesizer
- redhat:kdebase
- redhat:kdelibs
- redhat:kdelibs_devel
- redhat:kdelibs_sound
- redhat:kdelibs_sound_devel