Phoenixframework » Phoenix : Security Vulnerabilities, CVEs,
socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.
Max CVSS
7.5
EPSS Score
0.07%
Published
2022-10-17
Updated
2022-10-20
The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.
Max CVSS
6.1
EPSS Score
0.16%
Published
2017-11-17
Updated
2017-12-03
2 vulnerabilities found