Vulnerability Details CVE-1999-1549
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 5.0
References
Products affected by CVE-1999-1549
-
cpe:2.3:a:lynx_project:lynx:2.7
-
cpe:2.3:a:lynx_project:lynx:2.8