Actix Http

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-38512 Aug 10, 23:15 Cargo HIGH POC PATCH This Week

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Request Smuggling Fedora Actix Http Fedoraproject +1

NVD

CVSS 3.1

7.5

EPSS

1.8%

CVE-2020-35901 Dec 31, 09:15 Cargo HIGH POC PATCH This Week

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Actix Http Actix

NVD

CVSS 3.1

7.5

EPSS

1.4%

CVE-2021-38512 Cargo

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Information Disclosure Request Smuggling Fedora +3

NVD

CVE-2020-35901 Cargo

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

Information Disclosure Use After Free Memory Corruption +2

NVD