1 matches found
CVE-2022-3212: Allocation of Resources Without Limits or Throttling
::fromrequest would not, by default, set a limit for the size of the request body. That meant if a malicious peer would send a very large or infinite body your server might run out of memory and crash. This also applies to these extractors which used Bytes::fromrequest internally:...
7.5CVSS7.3AI score0.01002EPSS
SaveExploits1References3
20