CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

ecto 安全漏洞

ecto is an elixir-ecto open source toolkit for data mapping and language integration queries. A security vulnerability exists in ecto version 2.2.0, which stems from the lack of some kind of protection mechanism...

CVE-2017-20166: Improper Check for Unusual or Exceptional Conditions

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

CVE-2017-20166

CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

GHSA-2XXX-FHC8-9QVQ Ecto missing `is_nil` requirement

Ecto will not raise on queries with non-explicit nil comparisons ie if they aren't checked with isnil...

Ecto missing `is_nil` requirement

Ecto will not raise on queries with non-explicit nil comparisons ie if they aren't checked with isnil...

PT-2022-8026 · Ecto · Ecto

Name of the Vulnerable Software and Affected Versions: Ecto version 2.2.0 Description: The issue is related to a lack of protection mechanism in the interaction between is nil and raise functions. Specifically, Ecto will not raise on queries with non-explicit nil comparisons, unless they are...