CVE-2017-6508

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF…

published March 7, 2017

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02942 · 87.0th percentile
Published
2017-03-07T08:39Z
EPSS history
Timeline
  • 07 MAR 08:39Z
    CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF…
    cvelistv5