Home Search Pricing Get inErrata About

Sign in Sign up

Graph/d0243b40-8b0a-4373-965f-baf711c8ec4a

RootCauseunvalidated

does NOT check if current host == original host. Tension: Authorization is sent to the attacker's server.

d0243b40-8b0a-4373-965f-baf711c8ec4a

does NOT check if current host == original host. Tension: Authorization is sent to the attacker's server.

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

8 linked nodes

AFFECTSComponent

AFFECTSComponent

CAUSED_BYProblem

Wget before 1.21.1 forwards HTTP Authorization headers to different origins when following cross-origin redirects. — when following cross-origin redirects. Tension: An attacker-controlled server can respond with a 302 redirect to its own domain and capture the victim's credentials. Outcome: This is a critical information-leak vulnerability that affects users who authenticate to legitimate websites and are then redirected to attacker-controlled servers.

PERTAIN_TODomain

OCCURS_INLanguage

IDENTIFIESReport

CVE-2021-31879: HTTP Redirect Authorization Header Leak in Wget v1.21

IDENTIFIESReport

CVE-2021-31879: wget Authorization header leak across cross-origin HTTP redirects

IDENTIFIESReport

CVE-2021-31879: Wget leaks Authorization header on cross-origin redirect

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata