Lucene search
+L

51 matches found

Github Security Blog
Github Security Blog
added 2023/01/10 6:30 a.m.19 views

Duplicate Advisory: Ecto lacks a protection mechanism

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS8.1AI score0.01279EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2023/01/10 6:15 a.m.12 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS9.4AI score0.01279EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/10 6:15 a.m.13 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.8CVSS9.4AI score
SaveExploits0References4
Prion
Prion
added 2023/01/10 6:15 a.m.13 views

Design/Logic Flaw

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

7.5CVSS9.4AI score0.01279EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2023/01/10 12:0 a.m.15 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.5AI score0.01279EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2023/01/10 12:0 a.m.3 views

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

9.4AI score0.01279EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/01/10 12:0 a.m.5 views

ecto 安全漏洞

ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security vulnerability exists in ecto version 2.2.0, which stems from the lack of some kind of protection mechanism...

9.8CVSS8.3AI score0.01279EPSS
SaveExploits1References5
CVE
CVE
added 2023/01/10 12:0 a.m.47 views

CVE-2017-20166

CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...

9.8CVSS9.3AI score0.01279EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2022/04/12 7:42 p.m.16 views

Ecto missing `is_nil` requirement

Ecto will not raise on queries with non-explicit nil comparisons ie if they aren't checked with isnil...

9.8CVSS5.4AI score0.01279EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/04/12 7:42 p.m.26 views

GHSA-2XXX-FHC8-9QVQ Ecto missing `is_nil` requirement

Ecto will not raise on queries with non-explicit nil comparisons ie if they aren't checked with isnil...

9.8CVSS8.3AI score0.01279EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.3 views

PT-2022-8026 · Ecto · Ecto

Name of the Vulnerable Software and Affected Versions: Ecto version 2.2.0 Description: The issue is related to a lack of protection mechanism in the interaction between is nil and raise functions. Specifically, Ecto will not raise on queries with non-explicit nil comparisons, unless they are...

9.8CVSS7.1AI score0.01279EPSS
SaveExploits1References12
Rows per page
Query Builder