Executive Summary

This vulnerability in BusyBox wget versions through 1.3.7 allows an attacker to inject headers into an HTTP request by including raw carriage return (CR), line feed (LF), and other control characters in the HTTP request-target (path or query). This happens because the software accepts these control bytes, enabling the attacker to split the HTTP request line and insert malicious headers. To maintain proper HTTP/1.1 request-line formatting, raw spaces in the request-target must also be rejected.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow an attacker to perform HTTP request smuggling or header injection attacks, potentially leading to unauthorized actions, information disclosure, or bypassing security controls by manipulating HTTP requests sent by BusyBox wget.

Useful 0 Not Useful 0