cve/2018/CVE-2018-0494.md

CVE-2018-0494

Description

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

POC

Reference

• https://sintonen.fi/advisories/gnu-wget-cookie-injection.txt
• https://www.exploit-db.com/exploits/44601/

Github

No PoCs found on GitHub currently.