Lucene search

K
osvGoogleOSV:USN-6852-2
HistoryJun 27, 2024 - 10:42 a.m.

wget vulnerability

2024-06-2710:42:13
Google
osv.dev
3
wget
vulnerability
ubuntu
uri
remote attacker
userinfo subcomponent

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

USN-6852-1 fixed a vulnerability in Wget. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

It was discovered that Wget incorrectly handled semicolons in the userinfo
subcomponent of a URI. A remote attacker could possibly trick a user into
connecting to a different host than expected.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%