CVE Catalog
CVE-2017-1000212
CriticalSummary
Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.
Risk Assessment
An attacker can exploit this vulnerability to execute arbitrary Elixir code on the victim's system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the alchemist.vim plugin to the latest version to mitigate this vulnerability and restrict access to local ports.
Original NVD description (English source)
Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.