QwikSec

Security Database

CVE

CWE

Training

CVE-2024-12224

Published: May 30, 2025

Modified: May 30, 2025

PUBLISHED

Description

Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.

Vendor	Product	Versions
servo	rust-url	affected `0 - < 1.0.0`

Weaknesses (CWE)

References

https://rustsec.org/advisories/RUSTSEC-2024-0421.html

vendor-advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1887898

issue-tracking

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.