Lucene search
+L

3 matches found

OSV
OSV
added 2021/08/25 8:58 p.m.22 views

GHSA-8928-2FGM-6X9X HTTP Request Smuggling in actix-http

Affected versions of this crate did not properly detect invalid requests that could allow HTTP/1 request smuggling HRS attacks when running alongside a vulnerable front-end proxy server. This can result in leaked internal and/or user data, including credentials, when the front-end proxy is also...

7.5CVSS7.4AI score0.0181EPSS
SaveExploits1References7
OSV
OSV
added 2021/06/16 12:0 p.m.53 views

RUSTSEC-2021-0081 Potential request smuggling capabilities due to lack of input validation

Affected versions of this crate did not properly detect invalid requests that could allow HTTP/1 request smuggling HRS attacks when running alongside a vulnerable front-end proxy server. This can result in leaked internal and/or user data, including credentials, when the front-end proxy is also...

7.5CVSS7.4AI score0.0181EPSS
SaveExploits1References2
RustSec
RustSec
added 2021/06/16 12:0 p.m.19 views

Potential request smuggling capabilities due to lack of input validation

Affected versions of this crate did not properly detect invalid requests that could allow HTTP/1 request smuggling HRS attacks when running alongside a vulnerable front-end proxy server. This can result in leaked internal and/or user data, including credentials, when the front-end proxy is also...

7.5CVSS3.5AI score0.0181EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder