CVE-2017-1000163

EPSS 2.1%

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei simMetasploit —Patch —

Ciclo de vida

17 nov 2017Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.

Productos afectados

n/a · n/a

Referencias

https://elixirforum.com/t/security-releases-for-phoenix/4143