CVE-2017-20166 Ecto missing `is_nil` requirement
CriticalCVSS 9.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hex ecto(Hex) | = 2.2.0 | No fix listed |
| ecto project ecto | = 2.2.0 | No fix listed |
References
- github.com exploit patch third-party-advisory
- github.com patch third-party-advisory
- groups.google.com
- nvd.nist.gov third-party-advisory
- github.com third-party-advisory