CVE ID:	CVE-2024-38428
Description:	url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2024.2154.1   1.3.6.1.4.1.25623.1.0.856255   1.3.6.1.4.1.25623.1.1.2.2024.2780   1.3.6.1.4.1.25623.1.1.2.2024.2712   1.3.6.1.4.1.25623.1.1.12.2024.6852.2   1.3.6.1.4.1.25623.1.1.2.2025.1130   1.3.6.1.4.1.25623.1.1.2.2024.2407   1.3.6.1.4.1.25623.1.1.12.2024.6852.1   1.3.6.1.4.1.25623.1.1.2.2024.2697   1.3.6.1.4.1.25623.1.0.856258   1.3.6.1.4.1.25623.1.1.2.2024.2453   1.3.6.1.4.1.25623.1.1.2.2024.2762   1.3.6.1.4.1.25623.1.1.2.2024.2382   1.3.6.1.4.1.25623.1.1.2.2024.2430   1.3.6.1.4.1.25623.1.1.10.2024.0240   1.3.6.1.4.1.25623.1.1.2.2024.2543   1.3.6.1.4.1.25623.1.1.2.2024.2518
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-38428 https://git.savannah.gnu.org/cgit/wget.git/commit/?id=ed0c7c7e0e8f7298352646b2fd6e06a11e242ace https://lists.gnu.org/archive/html/bug-wget/2024-06/msg00005.html