HTTP Request Smuggling Vulnerability in tiny_http by Rust
CVE-2020-35884

6.5MEDIUM

Key Information:

Vendor: Tiny-http Project
Status: Tiny-http
Vendor: CVE Published:; 31 December 2020

🔔 Create Tiny-http Project Vulnerability Alert

What is CVE-2020-35884?

A security issue has been identified in the tiny_http crate for Rust that allows for HTTP request smuggling due to the improper handling of the Transfer-Encoding header. This vulnerability could be exploited by attackers to craft harmful requests that could be processed incorrectly by the server, potentially leading to varied impacts such as bypassing security controls or leaking sensitive information. Developers utilizing the tiny_http crate should review the relevant advisories and implement the necessary updates to mitigate any risks associated with this vulnerability.