{"id":"CVE-2021-31879","title":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.","summary":"GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-601"],"vendor":"gnu","product":"wget","affected":["wget <= 1.21.1","brocade_fabric_operating_system_firmware","cloud_backup","ontap_select_deploy_administration_utility","a250_firmware","500f_firmware"],"published":"2021-04-29","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:35.390","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2021-31879","references":[{"url":"https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html","label":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20210618-0002/","label":"cve@mitre.org"},{"url":"https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20210618-0002/","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","cve.org"],"epss":0.01104,"epssPercentile":0.65586,"ingestedAt":"2026-10-08T22:11:53.732Z","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-08T20:56:16.925183Z"},"slug":"CVE-2021-31879","body":"## Overview\n\nGNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.\n\n## Affected\n\n- `wget <= 1.21.1`\n- `brocade_fabric_operating_system_firmware`\n- `cloud_backup`\n- `ontap_select_deploy_administration_utility`\n- `a250_firmware`\n- `500f_firmware`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":33.6,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}