CVE-2017-1000053

HIGH 8.1CVE-2017-1000053 · Published 17/07/2017 · updated 17/06/2026

In short

CVE-2017-1000053 is a HIGH (CVSS 8.1) vulnerability affecting plug (plug project).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.1% of all vulnerabilities.
Fix: update to 1.0.4, 1.1.7, 1.2.3, 1.3.2 or later.

Package	Affected versions	Patched versions
plug plug_project	`≥ 1.0.0, < 1.0.4≥ 1.1.0, < 1.1.7≥ 1.2.0, < 1.2.3≥ 1.3.0, < 1.3.2`	`1.0.41.1.71.2.31.3.2`

Elixir Plug before v1.0.4, v1.1.7, v1.2.3 and v1.3.2 is vulnerable to arbitrary code execution in the deserialization functions of Plug.Session.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.