CVE-2018-1000883

Elixir Plug Plug version All contains a Header Injection vulnerability in Connection that can result in Given a cookie value, Headers can be added. This attack appear to be exploitable via Crafting a value to be sent as a cookie. This vulnerability appears to have been fixed in >= 1.3.5 or ~> 1.2.5 or ~> 1.1.9 or ~> 1.0.6.

• CWE-20

• https://github.com/dependabot/elixir-security-advisories/blob/master/packages/plug/2017-04-17.ymlThird Party Advisory
• https://github.com/elixir-plug/plug/commit/8857f8ab4acf9b9c22e80480dae2636692f5f573Patch, Third Party Advisory
• https://github.com/dependabot/elixir-security-advisories/blob/master/packages/plug/2017-04-17.ymlThird Party Advisory
• https://github.com/elixir-plug/plug/commit/8857f8ab4acf9b9c22e80480dae2636692f5f573Patch, Third Party Advisory

Published

Dec 20, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000877libarchive version commit 416694915449219d505531b1096384f323…8.8
• CVE-2018-1000878libarchive version commit 416694915449219d505531b1096384f323…8.8
• CVE-2018-1000879libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5…6.5
• CVE-2018-1000880libarchive version commit 9693801580c0cf7c70e862d305270a16b5…6.5
• CVE-2018-1000881Traccar Traccar Server version 4.0 and earlier contains a CW…
• CVE-2018-1000882WeBid version up to current version 1.2.2 contains a Directo…
• CVE-2018-1000884Vesta CP version Prior to commit f6f6f9cfbbf2979e301956d1c6a…
• CVE-2018-1000885PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7b…
• CVE-2018-1000886nasm version 2.14.01rc5, 2.15 contains a Buffer Overflow vul…
• CVE-2018-1000887Peel shopping peel-shopping_9_1_0 version contains a Cross S…
• CVE-2018-1000888PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-50…
• CVE-2018-1000889Logisim Evolution version 2.14.3 and earlier contains an XML…