Read the docs
TI-2024-09748 Aliases CVE-2024-10524GHSA-mqrm-h2pw-9j9r

GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs

Priority LOW 37CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Partial Red Hat: 4 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01071 65th percentileScored 2026-11-07
Fix Partial wget (gnu): 1.25.0Red Hat: 4 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GNUwgetbefore 1.25.01.25.0Patch availableCNA
  • wget VendorGNU Affected before 1.25.0 Fixed in 1.25.0 Patch available CNA

CPE names CISA-ADP · 1

CPEVersionsRoleVendor
cpe:2.3:a:gnu:wget:-:*:*:*:*:*:*:*not specified by CISA-ADP—GNU
  • cpe:2.3:a:gnu:wget:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·GNU

Remediation

  • Fix · CNA wget (gnu) Fixed in 1.25.0

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 10AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 9AffectedNo fix planned: Will not fix
Not affected: 1 product
  • Red Hat Enterprise Linux AI (RHEL AI)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-10524
  2. 2026-10-03 Alias added: GHSA-mqrm-h2pw-9j9r

References

Patch 1

Advisory 2

  • TI-2026-19388 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root"… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05164 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the… KEVCVSS 3.1HIGH 8.8
  • TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
  • TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
See all 1272 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences