Search for packages
Package details: pkg:deb/debian/wget@1.21.3-1%2Bdeb12u1
purl pkg:deb/debian/wget@1.21.3-1%2Bdeb12u1
Next non-vulnerable version 1.25.0-2
Latest non-vulnerable version 1.25.0-2
Risk 3.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-2s28-1dhg-pqd2
Aliases:
CVE-2024-10524
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.
1.25.0-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jgy2-zfn9-zufe url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent. CVE-2024-38428

Date Actor Action Vulnerability Source VulnerableCode Version
2025-08-01T19:40:54.348212+00:00 Debian Oval Importer Fixing VCID-jgy2-zfn9-zufe https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 37.0.0
2025-08-01T12:18:00.914223+00:00 Debian Importer Affected by VCID-2s28-1dhg-pqd2 https://security-tracker.debian.org/tracker/data/json 37.0.0