CVE-2024-10524

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-10524", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "state": "PUBLISHED", "assignerShortName": "JFROG", "dateReserved": "2024-10-30T08:59:30.617Z", "datePublished": "2024-11-19T14:23:09.718Z", "dateUpdated": "2025-03-21T18:03:44.339Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "wget", "vendor": "gnu", "versions": [{"lessThan": "1.25.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.<br></p>"}], "value": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2024-11-19T14:23:09.718Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://seclists.org/oss-sec/2024/q4/107"}, {"tags": ["third-party-advisory"], "url": "https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/"}, {"tags": ["patch"], "url": "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778"}], "source": {"discovery": "EXTERNAL"}, "title": "GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs"}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/11/18/6"}, {"url": "https://security.netapp.com/advisory/ntap-20250321-0007/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-21T18:03:44.339Z"}}, {"affected": [{"vendor": "gnu", "product": "wget", "cpes": ["cpe:2.3:a:gnu:wget:-:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "1.25.0", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-19T15:19:46.827592Z", "id": "CVE-2024-10524", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-19T15:20:48.148Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2024/11/18/6"}, {"url": "https://security.netapp.com/advisory/ntap-20250321-0007/"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-03-21T18:03:44.339Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-10524", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-19T15:19:46.827592Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:gnu:wget:-:*:*:*:*:*:*:*"], "vendor": "gnu", "product": "wget", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-19T15:20:43.581Z"}}], "cna": {"title": "GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "gnu", "product": "wget", "versions": [{"status": "affected", "version": "0", "lessThan": "1.25.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://seclists.org/oss-sec/2024/q4/107", "tags": ["vendor-advisory"]}, {"url": "https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/", "tags": ["third-party-advisory"]}, {"url": "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.", "supportingMedia": [{"type": "text/html", "value": "<p>Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.<br></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918 Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2024-11-19T14:23:09.718Z"}}}, "cveMetadata": {"cveId": "CVE-2024-10524", "state": "PUBLISHED", "dateUpdated": "2025-03-21T18:03:44.339Z", "dateReserved": "2024-10-30T08:59:30.617Z", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "datePublished": "2024-11-19T14:23:09.718Z", "assignerShortName": "JFROG"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "wget", "vendor": "gnu", "versions": [{"lessThan": "1.25.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "reefs@jfrog.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:gnu:wget:-:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "wget", "vendor": "gnu", "versions": [{"lessThan": "1.25.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host."}, {"lang": "es", "value": "Las aplicaciones que utilizan Wget para acceder a un recurso remoto mediante URL abreviadas y pasan credenciales de usuario arbitrarias en la URL son vulnerables. En estos casos, los atacantes pueden introducir credenciales creadas que har\u00e1n que Wget acceda a un host arbitrario."}], "id": "CVE-2024-10524", "lastModified": "2026-06-17T06:55:51.610", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.7, "source": "reefs@jfrog.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-10524", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-11-19T15:19:46.827592Z", "version": "2.0.3"}}]}, "published": "2024-11-19T15:15:06.740", "references": [{"source": "reefs@jfrog.com", "url": "https://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778"}, {"source": "reefs@jfrog.com", "url": "https://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/"}, {"source": "reefs@jfrog.com", "url": "https://seclists.org/oss-sec/2024/q4/107"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2024/11/18/6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20250321-0007/"}], "sourceIdentifier": "reefs@jfrog.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "reefs@jfrog.com", "type": "Secondary"}]}

{"bugzilla": {"description": "wget: GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs", "id": "2327303", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2327303"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L", "status": "draft"}, "cwe": "CWE-918", "details": ["Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.", "A flaw was found in the Wget package. Wget might issue an FTP request to a different host in configurations where the HTTP shorthand format is used with user-provided input. An attacker may be able to use specially crafted input to cause Wget to access an arbitrary host."], "name": "CVE-2024-10524", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "wget", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "wget", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "wget", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:1", "fix_state": "Not affected", "package_name": "rhelai1/bootc-nvidia-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI)"}, {"cpe": "cpe:/a:redhat:enterprise_linux_ai:1", "fix_state": "Not affected", "package_name": "rhelai1/instructlab-nvidia-rhel9", "product_name": "Red Hat Enterprise Linux AI (RHEL AI)"}], "public_date": "2024-11-19T14:23:09Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-10524\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-10524\nhttps://git.savannah.gnu.org/cgit/wget.git/commit/?id=c419542d956a2607bbce5df64b9d378a8588d778\nhttps://jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/\nhttps://seclists.org/oss-sec/2024/q4/107"], "threat_severity": "Moderate"}

{}