CVE-2021-38512

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust

published August 10, 2021

CVSS
—
EPSS
2%
Percentile
78.5
In the wild
Unconfirmed
What it is

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01810 · 78.5th percentile
Published
2021-08-10T22:12Z
EPSS history
Timeline
  • 10 AUG 22:12Z
    An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust
    cvelistv5