Vulnerability Description
set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local users to obtain sensitive information (e.g., credentials contained in the URL) by reading this attribute, as demonstrated by getfattr. This also applies to Referer information in the user.xdg.referrer.url metadata attribute. According to 2016-07-22 in the Wget ChangeLog, user.xdg.origin.url was partially based on the behavior of fwrite_xattr in tool_xattr.c in curl.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Wget | < 1.20.1 |
Related Weaknesses (CWE)
References
- http://git.savannah.gnu.org/cgit/wget.git/tree/NEWSRelease NotesThird Party Advisory
- http://www.securityfocus.com/bid/106358Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:3701
- https://security.gentoo.org/glsa/201903-08Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190321-0002/
- https://twitter.com/marcan42/status/1077676739877232640ExploitThird Party Advisory
- https://usn.ubuntu.com/3943-1/
- http://git.savannah.gnu.org/cgit/wget.git/tree/NEWSRelease NotesThird Party Advisory
- http://www.securityfocus.com/bid/106358Third Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2019:3701
- https://security.gentoo.org/glsa/201903-08Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190321-0002/
- https://twitter.com/marcan42/status/1077676739877232640ExploitThird Party Advisory
- https://usn.ubuntu.com/3943-1/
FAQ
What is CVE-2018-20483?
CVE-2018-20483 is a vulnerability with a CVSS score of 7.8 (HIGH). set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file, which allows local us...
How severe is CVE-2018-20483?
CVE-2018-20483 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-20483?
Check the references section above for vendor advisories and patch information. Affected products include: Gnu Wget.