Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-0494

Description

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

POC

Reference

- https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt

- https://www.exploit-db.com/exploits/44601/

Github

No PoCs found on GitHub currently.