CVE:CVE-2021-38189
CNNVD:CNNVD-202108-752
Rust是Mozilla基金会的一款通用、编译型编程语言。
Rust 0.9.6 之前的 le​​ttre crate 中存在安全漏洞，攻击者可以将两个 <CR><LF> 序列之后的字符注入任意 SMTP 命令。
solution:Upgrade lettre lettre to a higher version than 0.9.6,0.10.0:alpha1,0.10.0:alpha2,0.10.0:alpha3,0.10.0:alpha4,0.10.0:alpha5,0.10.0:beta1,0.10.0:beta2,0.10.0:beta3,0.10.0:beta4,0.10.0:rc1,0.10.0:rc2,and avoid the version (,0.9.6),0.10.0:alpha1,0.10.0:alpha2,0.10.0:alpha3,0.10.0:alpha4,0.10.0:alpha5,0.10.0:beta1,0.10.0:beta2,0.10.0:beta3,0.10.0:beta4,0.10.0:rc1,0.10.0:rc2