---

CVE-2021-28305 - log back

CVE-2021-28305 edited at 12 Mar 2021 18:50:08
Severity	- Unknown + Medium
Remote	- Unknown + Local
Type	- Unknown + Arbitrary code execution
Description	+ An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed.
References	+ https://rustsec.org/advisories/RUSTSEC-2021-0037.html + https://github.com/diesel-rs/diesel/pull/2663 + https://github.com/diesel-rs/diesel/commit/d4133288261612d43853245aa886e1a3a0d2dbfe
Notes

CVE-2021-28305 created at 12 Mar 2021 18:47:12