CVE-2017-6508 in wget
Summary
CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.