Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.
References
Link | Resource |
---|---|
https://github.com/elixir-ecto/ecto/pull/2125 | Exploit Third Party Advisory |
https://github.com/advisories/GHSA-2xxx-fhc8-9qvq | Third Party Advisory |
https://github.com/elixir-ecto/ecto/commit/db55b0cba6525c24ebddc88ef9ae0c1c00620250 | Patch Third Party Advisory |
https://groups.google.com/forum/#!topic/elixir-ecto/0m4NPfg_MMU | Exploit Mailing List Third Party Advisory |
Configurations
Information
Published : 2023-01-09 22:15
Updated : 2023-01-13 07:42
NVD link : CVE-2017-20166
Mitre link : CVE-2017-20166
JSON object : View
CWE
Products Affected
ecto_project
- ecto