Lynx versions up to 2.8.9 mishandled the userinfo subcomponent of a URI, allowing remote attackers to discover cleartext credentials, as these credentials might appear in SNI data...
5.3CVSS6AI score0.0407EPSS
SaveExploits0References1
SUSE CVE•added 2023/02/15 3:38 a.m.•7 views
SUSE CVE-2021-38165
Lynx through 2.8.9 mishandles the userinfo subcomponent of a URI, which allows remote attackers to discover cleartext credentials because they may appear in SNI data...