Severity
- CVSS 3.x
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/phoenixframework/phoenix ↗ | |
| 9d999fb45f8b8257b0ea57cd6802400823dc9a86 through 4d608bfc4900593d3ac1b12d184f7cccaca27d06 | No fix listed |
Also listed as affected (27)
| |
Description
The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.