-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability specifically exists in the code generated by the RustEmbed procedural macro for the get method. The advisory demonstrates exploitation through Asset::get() and explains the root cause as missing path validation. Since the macro generates this method implementation, the vulnerable logic resides in the macro's code generation for the get method when operating in debug mode without proper path canonicalization.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| rust-embed | rust | < 6.3.0 | 6.3.0 |