Plug Project Plug
3 CVEs affecting Plug Project Plug. Latest disclosed: 2018-12-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000053 | High | 8.1 | 2017-07-17 | Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session. |
CVE-2017-1000052 | High | 7.8 | 2017-07-17 | Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to null byte injection in the Plug.Static component, which may allow users to bypass filetyp… |
CVE-2018-1000883 | Medium | 6.5 | 2018-12-20 | Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack… |