High severity7.5NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026
CVE-2022-42975
CVE-2022-42975
Description
socket/transport.ex in Phoenix before 1.6.14 mishandles check_origin wildcarding. NOTE: LiveView applications are unaffected by default because of the presence of a LiveView CSRF token.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
phoenixHex | < 1.6.14 | 1.6.14 |
Affected products
3- Phoenix/Phoenixdescription
Patches
Vulnerability mechanics
References
4- github.com/phoenixframework/phoenix/commit/6e7185b33a59e0b1d1c0b4223adf340a73e963aenvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-p8f7-22gq-m7j9ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-42975ghsaADVISORY
- hexdocs.pm/phoenix/1.6.14/changelog.htmlghsaWEB
News mentions
0No linked articles in our index yet.