CVE:CVE-2020-28247
CNNVD:CNNVD-202011-975
Rust是一款通用、编译型编程语言。
Rust lettre 0.10.0-alpha版本及之前版本存在代码注入漏洞，该漏洞允许通过传输sendmail mod.rs注入任意的sendmail选项。
solution:Upgrade lettre lettre to a higher version than 0.8.3,0.9.5,0.7.0,0.10.0:alpha1,0.10.0:alpha2,0.10.0:alpha3,and avoid the version [0.8.0,0.8.3],[0.9.0,0.9.5],0.7.0,0.10.0:alpha1,0.10.0:alpha2,0.10.0:alpha3