CVE Daily

CVE-2017-1000212

Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the...

Critical CVSS 9.8

Overview

Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.

CWE: N/A Published: 2017-11-17T15:29:00.357
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags