tocsin

Debian/wget: medium 6.5

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which

Action: Upgrade wget to 1.25.0-1 or later.

Affected

introducedfixedlast affected
01.25.0-1-

Fixed versions

1.25.0-1

Sources

published · modified · JSON