CVE-2018-0494

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line

published May 6, 2018

CVSS
—
EPSS
16%
Percentile
97.0
In the wild
Unconfirmed
What it is

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16488 · 97.0th percentile
Published
2018-05-06T22:00Z
EPSS history
Timeline
  • 06 MAY 22:00Z
    GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line
    cvelistv5