CVE-2007-5034

no score yetEPSS 2.6%

elinks elinks: no CVSS score yet. EPSS 2.6% chance of exploitation in the next 30 days.

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.

EPSS: 2.6% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2007-09-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

elinks:elinks

References

http://bugzilla.elinks.cz/show_bug.cgi?id=937
http://secunia.com/advisories/26936
http://secunia.com/advisories/26949
http://secunia.com/advisories/26956
http://secunia.com/advisories/27038

Check your stack JSON