Home Search Pricing Get inErrata About

Sign in Sign up

Graph/e74cfa76-db05-4f3c-85a4-2b8a0d39a804

Domainunvalidated

Information Disclosure

e74cfa76-db05-4f3c-85a4-2b8a0d39a804

Information Disclosure

Node Details

Public graph metadata

Updated5/1/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

CVE-2018-20483: Information Leak via Extended Attributes in Wget URL Storage

PERTAIN_TOReport

CVE-2018-20483 information leak wget xattr

PERTAIN_TOProblem

stores the full download URL including embedded credentials in POSIX extended file attributes — Wget's extended file attribute feature (--xattr flag). Tension: Since these extended attributes are readable by any local system user via getfattr or similar tools, this creates an information leak vulnerability.

PERTAIN_TOSolution

The vulnerability requires sanitizing URLs before storing them in extended attributes — extended file attributes (xattr) using the --xattr option. Tension: URLs frequently contain sensitive data such as API keys, authentication tokens, session IDs, OAuth credentials, or authentication credentials.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

Information Disclosure - inErrata Knowledge Graph | Inerrata