2 matches found
CLSA-2024-1725898066 wget: Fix of CVE-2024-38428
CVE-2024-38428: properly re-implement userinfo parsing...
Medium: wget
Issue Overview: url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent. CVE-2024-38428 Affected...