An issue was discovered in the rcu_cell crate through 2020-11-14 for Rust. There are unconditional implementations of Send and Sync for RcuCell<T>.
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Link | Tags |
---|---|
https://rustsec.org/advisories/RUSTSEC-2020-0131.html | exploit third party advisory patch |
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/rcu_cell/RUSTSEC-2020-0131.md | third party advisory |