CVE-2016-4971

CVE-2016-4971 affects GNU Wget prior to 1.18. The issue occurs when following an HTTP redirect to an FTP resource: the filename provided by the server is trusted, which can cause wget to overwrite a local file with a name from the redirected resource. This could potentially allow arbitrary file o...

CVE-2016-7098

CVE-2016-7098 affects GNU Wget 1.17 and earlier. A race condition in recursive/mirroring mode can allow remote servers to bypass access-list restrictions by keeping an HTTP connection open. Public evidence includes exploit-db entries for GNU Wget