Approved changes feed: RSS · Atom

cpe:2.3:a:phoenixframework:phoenix:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorPhoenixframework (62455de5-0864-5ea8-8b7f-1a93274e379c)
ProductPhoenix (81ca8fd2-86b6-552b-8fac-8d7db6f71c4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/phoenixframework/phoenix purl2cpe 2026-06-01 10:11:29.036070
pkg:npm/phoenix purl2cpe 2026-06-01 10:11:29.036072

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000163 vulnerable 2026-06-08 05:08:34.203410 Details available
The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.
Published: 2017-11-17T21:00:00.000Z
Updated: 2024-09-17T03:59:53.617Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.