exploitDog

CVE-2020-35918

Опубликовано: 31 дек. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

An issue was discovered in the branca crate before 0.10.0 for Rust. Decoding tokens (with invalid base62 data) can panic.

Ссылки

https://github.com/return/branca/issues/24
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/tuupola/branca-spec/issues/22
Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2020-0075.html
Exploit
Third Party Advisory
https://github.com/return/branca/issues/24
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/tuupola/branca-spec/issues/22
Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2020-0075.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hakobaito:branca:*:*:*:*:*:rust:*:*

Версия до 0.10.0 (исключая)

EPSS

Процентиль: 24%

0.00081

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-c9rv-3jmq-527w

CVSS3: 5.5

github

больше 4 лет назад

Unexpected panic when decoding tokens in branca

EPSS

Процентиль: 24%

0.00081

Низкий

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo