What’s Vulnerable › Vulnerabilities

CVE-2017-1000163

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-11-17 · updated 2026-06-17
• Weakness: CWE-601

Description

The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.

Affected products

• phoenixframework phoenix: 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1.0 (+9)

References

• https://elixirforum.com/t/security-releases-for-phoenix/4143
• https://elixirforum.com/t/security-releases-for-phoenix/4143

Get alerted when CVE-2017-1000163 or the next vulnerability affects your stack