High severityNVD Advisory· Published Aug 10, 2021· Updated Aug 4, 2024
CVE-2021-38512
CVE-2021-38512
Description
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
actix-httpcrates.io | < 2.2.1 | 2.2.1 |
Affected products
2- Rust/actix-httpdescription
Patches
Vulnerability mechanics
References
8- github.com/advisories/GHSA-8928-2fgm-6x9xghsaADVISORY
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67URRW4K47SR6LNQB4YALPLGGQMQK7HO/mitrevendor-advisoryx_refsource_FEDORA
- nvd.nist.gov/vuln/detail/CVE-2021-38512ghsaADVISORY
- github.com/actix/actix-web/commit/e965d8298f421e9c89fe98b1300b8361e948c324ghsaWEB
- github.com/actix/actix-web/pull/2363ghsaWEB
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67URRW4K47SR6LNQB4YALPLGGQMQK7HOghsaWEB
- raw.githubusercontent.com/rustsec/advisory-db/main/crates/actix-http/RUSTSEC-2021-0081.mdghsax_refsource_MISCWEB
- rustsec.org/advisories/RUSTSEC-2021-0081.htmlghsax_refsource_MISCWEB
News mentions
0No linked articles in our index yet.