Description
The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Phoenix Framework - Open Redirect http/cves/2017/CVE-2017-1000163.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Hex | phoenix | < 1.0.6 | 1.0.6 | GHSA-cmfh-8f8r-fj96 |
| Hex | phoenix | >= 1.1.0, < 1.1.8 | 1.1.8 | GHSA-cmfh-8f8r-fj96 |
| Hex | phoenix | >= 1.2.0, < 1.2.3 | 1.2.3 | GHSA-cmfh-8f8r-fj96 |