CVE-2003-1559

CVE-2003-1559 describes a vulnerability in Microsoft Internet Explorer versions 5.22 and 5 through 6 SP1, where the browser incorrectly sends Referer headers containing sensitive HTTPS URLs when requesting HTTP resources. This allows remote attackers to potentially capture confidential information by analyzing web server logs. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, leading to a potential information disclosure. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness despite its age and lack of media coverage.