high8.1
CVE-2017-1000053
Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.
Impact
Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plug Project | Plug | from 1.0.0 before 1.0.4 from 1.1.0 before 1.1.7 from 1.2.0 before 1.2.3 from 1.3.0 before 1.3.2 |