CVE-2019-25010 (High) detected in failure-0.1.5.crate

[mend-for-github.aaakk.us.kg]

CVE-2019-25010 - High Severity Vulnerability

Vulnerable Library - failure-0.1.5.crate

Experimental error handling abstraction.

Library home page: https://crates.io/api/v1/crates/failure/0.1.5/download

Dependency Hierarchy:

• ❌ failure-0.1.5.crate (Vulnerable Library)

Vulnerability Details

An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when private_get_type_id is overridden.

Publish Date: 2020-12-31

URL: CVE-2019-25010

CVSS 3 Score Details (9.8)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.