What’s Vulnerable › Vulnerabilities

CVE-2021-31879

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-29 · updated 2026-10-08
• Weakness: CWE-601

Description

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.

Affected products

• Broadcom Brocade Fabric Operating System Firmware: all versions
• gnuwget wget: through 1.21.1
• NetApp 500F Firmware: all versions
• NetApp A250 Firmware: all versions
• NetApp Cloud Backup: all versions
• NetApp ONTAP Select Deploy administration utility: all versions

References

• https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html
• https://security.netapp.com/advisory/ntap-20210618-0002/
• https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html
• https://security.netapp.com/advisory/ntap-20210618-0002/

Get alerted when CVE-2021-31879 or the next vulnerability affects your stack