ZeroHour

CVE-2016-9179

CVSS 3.0
7.5 high
EPSS
2%p79
Published
()
Modified
Description

lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could instead be tricked into connecting to a different host.

Vendors
lynx
Products
lynx
Weakness
CWE-20
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.