Security Advisory

CVE-2017-6508

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-03-07 08:39:00
Last updated 2024-08-05 15:33:20
Assigner mitre
State PUBLISHED

Description

CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.