CVE-2017-1000053

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.

Score

CVSS 3.1 8.1 High

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-502

Affected products

• Plug (Plug Project)

References

• https://elixirforum.com/t/security-releases-for-plug/3913