CVE-2003-0459

CVE-2003-0459 describes a vulnerability in KDE Konqueror versions 3.1.2 and earlier, where authentication credentials embedded in "user:password@host" URLs were not removed from the HTTP-Referer header. This oversight allowed remote websites to potentially steal these credentials if a user navigated from a page containing such a URL to the remote site. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector, low complexity, and a potential impact of partial confidentiality loss. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Furthermore, the CVE has received minimal community discussion and media coverage.