conduit-hyper integrates a conduit application with the hyper server. Prior to version 0.4.2, conduit-hyper did not check any limit on a request's length before calling hyper::body::to_bytes . An attacker could send a malicious request with an abnormally large Content-Length, which could lead to a ...
7.5CVSS
7.3AI Score
0.001EPSS