CVE-2017-1000052

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass…

published July 13, 2017

CVSS
—
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00423 · 35.5th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass…
    cvelistv5