AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2007-5034

MEDIUM · CVSS 4.3 EPSS 2.60%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-09-21 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It may be remotely exploitable.

CVE
CVE-2007-5034
Severity
MEDIUM
CVSS
4.3
EPSS
2.60%

Original NVD Description

ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.