CVE Catalog
CVE-2017-1000053
HighSummary
Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the application.
Recommendation
It is recommended to update Elixir Plug to the latest version to mitigate this vulnerability.
Other vulnerabilities in Elixir Plug
Original NVD description (English source)
Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.