Skip to content
OpenAdvisories

Package · Hex

phoenix_live_view

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.1

    Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR. redirect/2 validates …