PT-2020-14228
CVE-2020-15150
·
تاريخ النشر
2020-09-01
·
تاريخ التحديث
2022-04-12
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Paginator versions prior to 1.0.0
Description
The issue allows for Remote Code Execution (RCE) attacks via input parameters to the
paginate() function. This potentially affects all current users of Paginator prior to version 1.0.0.Recommendations
For versions prior to 1.0.0, upgrade to version 1.0.0 immediately, ensuring your Elixir version is >=1.5 to accommodate the dependency requirements of the patched version. As a temporary workaround, consider restricting input parameters to the
paginate() function until the upgrade is possible. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾