Описание
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Advanced Cluster Management for Kubernetes 2 | cincinnati-container | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-444
https://bugzilla.redhat.com/show_bug.cgi?id=1993528rust-actix-http: potential request smuggling capabilities due to lack of input validation
EPSS
Процентиль: 77%
0.0181
Низкий
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
около 5 лет назад
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.
EPSS
Процентиль: 77%
0.0181
Низкий
7.5 High
CVSS3