CVE-2020-36450 is a high-severity vulnerability affecting the Rust 'bunch' crate, specifically versions through 2020-11-12, due to unconditional implementations of Send and Sync for Bunch<T>. This flaw carries a CVSS score of 8.1, indicating a high potential for impact across confidentiality, integrity, and availability, with a network attack vector and high attack complexity. Despite its severity, there is currently no evidence of active exploitation, no publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2020-11-12CPE matchmatch criteria | cpe:2.3:a:bunch_project:bunch:*:*:*:*:*:rust:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.