Lynx 2.x does not properly distinguish between internal...
Moderate severity
Unreviewed
Published
Apr 30, 2022
to the GitHub Advisory Database
•
Updated Feb 8, 2024
Description
Published by the National Vulnerability Database
Nov 16, 1999
Published to the GitHub Advisory Database
Apr 30, 2022
Last updated
Feb 8, 2024
Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "secure" hidden form value from a temporary file and craft a LYNXOPTIONS: URL that causes Lynx to modify the user's configuration file and execute commands.
References