Your submission was sent successfully! Close

CVE-2013-2074

Published: 15 May 2013

kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message.

Priority

Medium