High · 7.5 CVE-2021-45712 EUVD-2022-0747GHSA-cgw6-f3mj-h742GHSA-xrg3-hmf3-rvgwRUSTSEC-2021-0126

RustEmbed generated `get` method allows for directory traversal when reading files from disk

Published Dec 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

An issue was discovered in the rust-embed crate before 6.3.0 for Rust. A ../ directory traversal can sometimes occur in debug mode.

Ecosystem	Package	Affected	Fixed	Record
crates.io	rust-embed	< 6.3.0	6.3.0	GHSA-cgw6-f3mj-h742
crates.io	rust-embed	>= 0.0.0-0, < 6.3.0	6.3.0	RUSTSEC-2021-0126