CVE-2017-1000053

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session

published July 13, 2017

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01934 · 79.8th percentile
Published
2017-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session
    cvelistv5