Vulnerabilities > Elinks > Elinks > 0.12
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-02-23 | CVE-2012-6709 | Improper Certificate Validation vulnerability in multiple products ELinks 0.12 and Twibright Links 2.3 have Missing SSL Certificate Validation. | 4.3 |
| 2013-01-03 | CVE-2012-4545 | Improper Authentication vulnerability in Elinks 0.12 The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials. | 5.1 |