Home

CVE-2021-31879

Description

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.

Risk Information

Base Score
6.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.154

Associated Vulnerability

VulnerabilityOS Platform
wget Security Update (ALAS-2023-012) wget-1.21.3-1.amzn2023.0.2.x86_64.rpmLinux
SUSE-SU-2025:0425-1(Basesystem Module 15-SP6) wget-debugsource-1.20.3-150600.19.12.1.x86_64.rpmLinux
SUSE-SU-2025:0425-1(Basesystem Module 15-SP6) wget-debuginfo-1.20.3-150600.19.12.1.x86_64.rpmLinux
SUSE-SU-2025:0425-1(Basesystem Module 15-SP6) wget-1.20.3-150600.19.12.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234