tonini/alchemist-server

tonini/alchemist-server

GitHubGitHub
GitHubgithub.com
Releases0
Stars192
Editor/IDE independent background server to inform about Elixir mix projects
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2017-1000212↗
—7.5 HIGH

Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an ephemeral port on localhost that are then evaluated as elixir code.