{"action":"Upgrade wget to 1.12-2.1 or later.","affected":[{"fixed":"1.12-2.1","introduced":"0"}],"component":"wget","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["1.12-2.1"],"id":"tcs_01M5N9J8EX4F4JP7PCWRQ5ZPD5","modified_at":"2026-10-23T17:47:29.334602611Z","published_at":"2010-07-06T17:17:13.313Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2010-2252","https://security-tracker.debian.org/tracker/CVE-2010-2252"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2010-2252","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2010-2252"}],"summary":"GNU Wget 1.12 and earlier uses a server-provided filename instead of the original URL to determine the destination filename of a download, which allows remote servers to create or overwrite arbitrary"}