CVE-2024-12224
HIGHDescription
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.
Is your site exposed to CVE-2024-12224?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| servo | idna |
References
Frequently Asked Questions
What is CVE-2024-12224? +
How severe is CVE-2024-12224? +
What products are affected by CVE-2024-12224? +
How do I check if I'm vulnerable to CVE-2024-12224? +
Related Vulnerabilities
In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access …
Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue …
The mod_auth module in OTP's inets httpd server, when configured with dets or mnesia authentication backends and multiple directory configuration …
Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unauthenticated remote client to pass the Tempo duplicate-submission …
In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued …
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before …
