Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240729-11
HistoryJul 29, 2024 - 12:00 a.m.

ROS-20240729-11

2024-07-2900:00:00
redos.red-soft.ru
5
vulnerability
cargo package manager
rust programming language
arbitrary html injection
remote execution
unix

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.9

Confidence

Low

EPSS

0.003

Percentile

71.3%

JSON

A vulnerability in the Cargo package manager of the Rust programming language involves the injection of arbitrary HTML
after including it in a report generated by Cargo. Exploitation of the vulnerability could allow an attacker,
acting remotely, to execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64rust< 1.79.0-2UNKNOWN

Related

osv 3
nessus 5
ubuntucve 1
cve 1
alpinelinux 1
openvas 2
github 1
prion 1
cbl_mariner 1
amazon 1
cvelist 1
nvd 1
debiancve 1
photon 1
osv
osv
CVE-2023-40030
2023-08-24 23:15:09
cargo1.72-1.72.1-1.1 on GA media
2024-06-15 00:00:00
Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
2023-08-24 22:15:51
nessus
nessus
Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2024-497)
2024-01-23 00:00:00
Fedora 40 : rust-cargo / rust-cargo-c / rust-cargo-credential / etc (2023-6f419dc91b)
2024-04-29 00:00:00
Amazon Linux 2 : rust (ALAS-2024-2426)
2024-01-23 00:00:00
ubuntucve
ubuntucve
CVE-2023-40030
2023-08-24 00:00:00
cve
cve
CVE-2023-40030
2023-08-24 23:15:09
alpinelinux
alpinelinux
CVE-2023-40030
2023-08-24 23:15:09
openvas
openvas
openSUSE: Security Advisory for rust, rust1.72 (SUSE-SU-2023:3722-1)
2024-03-04 00:00:00
Fedora: Security Advisory (FEDORA-2023-6f419dc91b)
2024-09-10 00:00:00
github
github
Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
2023-08-24 22:15:51
prion
prion
Cross site scripting
2023-08-24 23:15:00
cbl_mariner
cbl_mariner
CVE-2023-40030 affecting package rust for versions less than 1.72.0-2
2023-10-11 01:41:59
amazon
amazon
Medium: rust
2024-01-19 01:51:00
cvelist
cvelist
CVE-2023-40030 Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
2023-08-24 22:56:41
nvd
nvd
CVE-2023-40030
2023-08-24 23:15:09
debiancve
debiancve
CVE-2023-40030
2023-08-24 23:15:09
photon
photon
Moderate Photon OS Security Update - PHSA-2023-5.0-0177
2023-12-22 00:00:00

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

7.9

Confidence

Low

EPSS

0.003

Percentile

71.3%

JSON
Related for ROS-20240729-11
osv3nessus5ubuntucve1cve1alpinelinux1openvas2github1prion1cbl_mariner1amazon1cvelist1nvd1debiancve1photon1