CLEANSTART-2026-RQ35898 set_file_metadata in xattr

Security vulnerability affects the wget package. setfilemetadata in xattr...

CentOS 8 : curl (CESA-2019:3701)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3701 advisory. - curl: NTLM type-2 heap out-of-bounds buffer read CVE-2018-16890 - wget: Information exposure in setfilemetadata function in xattr.c CVE-2018-20483 -...

Information Disclosure

wget is vulnerable to information disclosure. The vulnerability exists as the information exposure in setfilemetadata function in xattr.c...

CVE-2018-20483: Exposure of Sensitive Information to an Unauthorized Actor

setfilemetadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information e.g., credentials contained in the URL by reading this attribut...