HomeDefectsLIN1021-12289
Fixed

LIN1021-12289 : Security Advisory - wget - CVE-2024-10524

Created: Nov 11, 2024    Updated: May 28, 2025
Resolved Date: May 21, 2025
Found In Version: 10.21.20.1
Fix Version: 10.21.20.25
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

https://nvd.nist.gov/vuln/detail/CVE-2024-10524

CVEs