CVE-2021-31879
Public on 2021-04-29
Modified on 2024-01-28
Description
A flaw was found in wget. If wget sends an Authorization header as part of a query and receives an HTTP REDIRECT to a third party in return, the Authorization header will be forwarded as part of the redirected request. This issue creates a password leak, as the second server receives the password. The highest threat from this vulnerability is confidentiality.
CVSS v3 Base Score
See breakdown
