3 results · Clear filters · Feed
-
Unscored —
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n seque…
-
High 8.8
GNU Wget: stack overflow in HTTP protocol handling
The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…
-
Unscored —
GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted …