CVE-2002-1344

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.

View graph Watch Export

CVSS v3.1

—

EPSS

4.25%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

2 relationships

Timeline

disclosure → media coverage

Dec 18, 2002

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026