Security Advisory

CVE-2017-1000212

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-11-17 15:00:00
Last updated 2024-09-17 02:31:50
Assigner mitre
State PUBLISHED

Description

Elixirs vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.