CVE-2018-1000883

CVE-2018-1000883 describes a header injection vulnerability in Elixir Plug Plug versions prior to 1.3.5, 1.2.5, 1.1.9, and 1.0.6. An attacker can exploit this by crafting a malicious cookie value, leading to the injection of arbitrary headers into the HTTP response. This medium-severity vulnerability has a CVSS score of 6.5, indicating that it can be exploited over the network with low complexity, requiring user interaction, and primarily impacts integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.