ash_phoenix vulnerabilities (Hex)
4 vulnerabilities.
-
ash_phoenixHex AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data 2.3 Low -
ash_phoenixHex Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain 7.6 High -
ash_phoenixHex AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant 6.3 Medium -
ash_phoenixHex AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message 2.3 Low