Plug Security Vulnerabilities and Issues — Plug CVE List

Lucene search

Plug ProjectPlug

2 matches found

CVE•added 2017/07/17 1:18 p.m.•44 views

CVE-2017-1000052

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.

7.8CVSS7.7AI score0.00246EPSS

CVE•added 2017/07/17 1:18 p.m.•36 views

CVE-2017-1000053

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.

8.1CVSS8.3AI score0.01151EPSS