Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT request in cleartext, which allows remote attackers to sniff sensitive data that would have been protected by TLS. NOTE: this issue only occurs when a proxy is defined for https.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ELinks HTTPS POST请求信息泄露漏洞
Vulnerability Description
ELinks是一款Linux系统下的开源纯文本浏览器。 ELinks实现现HTTPS POST请求的方式存在漏洞，可能导致敏感信息泄露。 如果ELinks向HTTPS URL发送POST请求，且为HTTPS定义了代理，ELinks就会将POST请求的消息体和Content-*头以明文添加到CONNECT请求中，因此代理就可以嗅探到本应受到TLS保护的所有数据。
CVSS Information
N/A
Vulnerability Type
N/A