1 matches found
Code injection
The use of String.toatom/1 in PowAssent is susceptible to denial of service attacks. In PowAssent.Phoenix.AuthorizationController a value is fetched from the user provided params, and String.toatom/1 is used to convert the binary value to an atom so it can be used to fetch the provider...
2.1CVSS5.3AI score0.01082EPSS
SaveExploits0References4Affected Software1
20