https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:56:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04857 bdu:2020-04857 https://cve.radiocsirt.org/vuln/bdu:2020-04857 https://cve.radiocsirt.org/vuln/bell-cve-2018-20483 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2018-20483 https://cve.radiocsirt.org/vuln/cleanstart-2026-rq35898 <p><strong>Affected:</strong> CleanStart: wget</p> <p>Security vulnerability affects the wget package. set_file_metadata in xattr.</p> <p><strong>Affected:</strong> CleanStart: wget</p> <p>Security vulnerability affects the wget package. set_file_metadata in xattr.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-rq35898 https://cve.radiocsirt.org/vuln/cnvd-2019-03429 cnvd-2019-03429 https://cve.radiocsirt.org/vuln/cnvd-2019-03429 https://cve.radiocsirt.org/vuln/euvd-2026-70320 EUVD-2026-70320 https://cve.radiocsirt.org/vuln/euvd-2026-70320 https://cve.radiocsirt.org/vuln/fkie_cve-2018-20483 <p>set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file&#39;s origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.</p> <p>set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file&#39;s origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-20483 https://cve.radiocsirt.org/vuln/ghsa-mxm6-6r3r-6wj4 <p>set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file&#39;s origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.</p> <p>set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file&#39;s origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.</p> https://cve.radiocsirt.org/vuln/ghsa-mxm6-6r3r-6wj4 https://cve.radiocsirt.org/vuln/gsd-2018-20483 gsd-2018-20483 https://cve.radiocsirt.org/vuln/gsd-2018-20483 https://cve.radiocsirt.org/vuln/opensuse-su-2019:0057-1 <p>Security update for wget</p> <p>Security update for wget</p> https://cve.radiocsirt.org/vuln/opensuse-su-2019:0057-1 https://cve.radiocsirt.org/vuln/suse-su-2019:0093-1 <p>Security update for wget</p> <p>Security update for wget</p> https://cve.radiocsirt.org/vuln/suse-su-2019:0093-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-20483 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: wget</p> <p>set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file&#39;s origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: wget</p> <p>set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file&#39;s origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-20483