Vendors / Plug Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Plug Project records in CISA KEV No Plug Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01934 · Published 2017-07-13 · Fixed in 1.0.4, 1.1.7 +2 CWE-502
Priority LOW 34
Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetype restrictions.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00423 · Published 2017-07-13 · Fixed in 1.0.4, 1.1.7 +2 CWE-74
Priority LOW 31
Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01131 · Published 2018-12-20 · Fixed in 1.0.6, 1.1.9 +2 CWE-20
Open these records in search → All records by CVSS severity
0 2 1 0 0
