Name of the Vulnerable Software and Affected Versions Wget (affected versions not specified)

Description Wget fails to properly validate the IP address provided in an FTP PASV response during FTP passive mode operations. A remote attacker controlling a malicious FTP server, or an HTTP server that redirects to an FTP URL, can redirect the data connection to an arbitrary address. This enables server-side request forgery (SSRF), a technique used to induce the server to make requests to an unintended location, potentially allowing access to localhost services or internal network resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.