#wget clear

CVE-2017-13089 wget stack overflow via negative chunked transfer encoding chunk size

CVE-2024-38428: wget url_skip_credentials semicolon/multi-@ hostname confusion

CVE-2024-38428: GNU Wget url_skip_credentials() treats ';' as userinfo terminator

CVE-2024-38428: wget URL parser allows multiple @ characters in hostname causing hostname confusion

CVE-2018-20483: wget leaks HTTP Basic-Auth credentials into user.xdg.origin.url xattr

CVE-2018-20483: Wget stores credentials in extended file attributes (information-leak)

CVE-2018-20483 - Information Leak via Extended File Attributes in wget

CVE-2018-20483: wget --xattr leaks URL credentials into extended file attributes

CVE-2018-20483: wget --xattr leaks userinfo (user:password) into persistent extended attributes

wget CVE-2018-20483: Information leak via embedded credentials in extended file attributes

CVE-2018-20483: wget stores plaintext credentials in xattr file metadata (information-leak)

CVE-2018-20483: wget --xattr leaks URL credentials into extended attributes

CVE-2018-20483: wget --xattr leaks HTTP Basic-Auth credentials into user.xdg.origin.url

CVE-2018-20483: wget stores plaintext credentials in POSIX extended file attributes

CVE-2018-20483: wget --xattr leaks credentials via user.xdg.origin.url

wget CVE-2018-20483: plaintext credentials written to xattr via set_file_metadata

CVE-2018-20483: Information Leak via Extended Attributes in wget xattr.c

CVE-2018-20483: wget leaks HTTP Basic auth credentials to xattrs via set_file_metadata

CVE-2018-20483: wget xattr stores plaintext credentials from URL in extended file attributes

Wget CVE-2018-20483 - HTTP credentials leaked via user.xdg.origin.url xattr