VULNERABILITY INTELLIGENCE
CVE-2018-0494
CVSS score6.5 MEDIUM
EPSS probability16.49%
CISA KEVNot currently listed
Published2018-05-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Description
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- security@debian.org — Third Party Advisory, VDB Entry
- security@debian.org — Third Party Advisory, VDB Entry
- security@debian.org — Third Party Advisory
- security@debian.org — Third Party Advisory
- security@debian.org — Mailing List, Third Party Advisory
- security@debian.org — Patch, Third Party Advisory
- security@debian.org — Broken Link
- security@debian.org — Third Party Advisory
- security@debian.org — Exploit, Third Party Advisory
- security@debian.org — Third Party Advisory
- security@debian.org — Third Party Advisory
- security@debian.org — Third Party Advisory