CVE-2017-1000163 - The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks

Back Back to CVE browser

MEDIUM

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks

Published Nov 17, 2017

6.1

MEDIUM

CVSS 3.0

EPSS 2.38%

Description

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (3)

https://elixirforum.com/t/security-releases-for-phoenix/4143
x_refsource_CONFIRMMitigationThird Party Advisory
https://github.com/advisories/GHSA-cmfh-8f8r-fj96
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000163

Link	Providers	Tags
https://elixirforum.com/t/security-releases-for-phoenix/4143		x_refsource_CONFIRMMitigationThird Party Advisory
https://github.com/advisories/GHSA-cmfh-8f8r-fj96		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000163