Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82jv-f4jx-8r27

Опубликовано: 09 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

EPSS

Процентиль: 16%
0.00051
Низкий

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 1 месяца назад

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

CVSS3: 8.8
nvd
около 1 месяца назад

A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment.

CVSS3: 8.8
debian
около 1 месяца назад

A security issue was discovered in GNU Wget2 when handling Metalink do ...

CVSS3: 8.8
fstec
около 1 месяца назад

Уязвимость менеджера загрузок GNU Wget2, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю раскрыть защищаемую информацию и скомпрометировать систему

suse-cvrf
25 дней назад

Security update for wget2

EPSS

Процентиль: 16%
0.00051
Низкий

8.8 High

CVSS3

Дефекты

CWE-22