SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wget (SUSE-SU-2024:4145-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4145-1 advisory. - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Tenable has extracted the preceding...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : wget (SUSE-SU-2024:4138-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4138-1 advisory. - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Tenable has extracted the preceding...

OESA-2024-2497 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: Applications th...

CLSA-2024-1733428726 wget: Fix of CVE-2024-38428

CVE-2024-38428: properly re-implement userinfo parsing rfc2396...

openSUSE Security Advisory (SUSE-SU-2024:4145-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for wget

This update for wget fixes the following issues: CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for yo...

SUSE-SU-2024:4145-1 Security update for wget

This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773...

openSUSE Security Advisory (SUSE-SU-2024:4138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for wget

This update for wget fixes the following issues: CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for yo...

SUSE-SU-2024:4138-1 Security update for wget

This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL bsc1233773...

The vulnerability of the GNU Wget download manager, related to insufficient validation of requests on the server side, allows a perpetrator to execute SSRF attacks, spear-phishing attacks, or “man-in-the-middle” attacks.

The vulnerability of the GNU Wget download manager is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack, a man-in-the-middle attack, or another type of attack...

Mageia: Security Advisory (MGASA-2024-0378)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2024-0378 Updated wget packages fix security vulnerability

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...

Updated wget packages fix security vulnerability

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524...

GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs

...

CBL Mariner 2.0 Security Update: wget (CVE-2024-10524)

The version of wget installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-10524 advisory. - Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credential...

CVE-2024-10524 affecting package wget for versions less than 1.21.2-4

CVE-2024-10524 affecting package wget for versions less than 1.21.2-4. A patched version of the package is available...

GNU Wget Code Problem Vulnerability

GNU Wget is a set of free software from the American GNU community for downloading over the Internet, which supports downloading over the three most common TCP/IP protocols: HTTP, HTTPS, and FTP. A code issue vulnerability exists in GNU Wget that stems from an application using Wget to access...

CVE-2024-10524

A flaw was found in the Wget package. Wget might issue an FTP request to a different host in configurations where the HTTP shorthand format is used with user-provided input. An attacker may be able to use specially crafted input to cause Wget to access an arbitrary host...

ALPINE-CVE-2024-10524

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host...