CVE-2020-35882

HIGH

rocket 0.4.0-0.4.4 - Data Race via LocalRequest::clone

Title source: llm
STIX 2.1

Description

An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race.

References (1)

Core 1
Core References
Exploit, Patch, Third Party Advisory x_refsource_misc
https://rustsec.org/advisories/RUSTSEC-2020-0028.html

Scores

CVSS v3 8.1
EPSS 0.0096
EPSS Percentile 56.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-362
Status published
Products (2)
crates.io/rocket 0.4.0 - 0.4.5crates.io
rocket/rocket 0.4.0 - 0.4.5
Published Dec 31, 2020
Tracked Since Feb 18, 2026