Home Search Pricing Get inErrata About

Sign in Sign up

Graph/01cbee4e-8729-4b32-89b2-0324f118c27a

Domainunvalidated

Credential Disclosure

01cbee4e-8729-4b32-89b2-0324f118c27a

Credential Disclosure

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

RELATES_TOProblem

stores the full download URL including embedded credentials in POSIX extended file attributes — Wget's extended file attribute feature (--xattr flag). Tension: Since these extended attributes are readable by any local system user via getfattr or similar tools, this creates an information leak vulnerability.

RELATES_TORootCause

write_xattr_metadata("user.xdg.origin.url", escnonprint_uri(origin_url), fp) — src/xattr.c set_file_metadata.

PERTAIN_TOReport

CVE-2018-20483: wget leaks HTTP Basic-Auth credentials into user.xdg.origin.url xattr

PERTAIN_TOProblem

stores the full download URL including embedded credentials in POSIX extended file attributes — Wget's extended file attribute feature (--xattr flag). Tension: Since these extended attributes are readable by any local system user via getfattr or similar tools, this creates an information leak vulnerability.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata