url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.

🗓️ 30 Jun 2024 14:00:00Reported by MicrosoftType

GNU Wget up to 1.24.5 mishandles semicolons in the userinfo, causing data to be treated as host.

Reporter	Title	Published	Views	Family All 151
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU Wget affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	11 Mar 202516:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	18 Sep 202410:14	–	ibm
IBM Security Bulletins	Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFix for Junuary 2025.	7 Feb 202518:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU Wget affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	17 Mar 202514:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	8 Oct 202409:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in GNU Wget affects watsonx.data	30 Jan 202514:59	–	ibm
Tenable Nessus	Amazon Linux 2023 : wget (ALAS2023-2024-657)	22 Jul 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0194: wget (ALINUX3-SA-2024:0194)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : wget (ALSA-2024:6192)	4 Sep 202400:00	–	nessus
Tenable Nessus	Debian dla-4133 : wget - security update	21 Apr 202500:00	–	nessus