CVE-2023-45612

🗓️ 09 Oct 2023 10:20:53Reported by JetBrainsType

JetBrains Ktor before 2.3.5 ContentNegotiation XXE vulnerability

Reporter	Title	Published	Views	Family All 14
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor	15 Oct 202520:42	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor	22 Oct 202515:02	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor	7 Nov 202518:44	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor	3 Oct 202514:59	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor	4 Nov 202514:16	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor	26 Sep 202510:29	–	githubexploit
Circl	CVE-2023-45612	9 Oct 202314:15	–	circl
CNNVD	JetBrains Ktor Code Issue Vulnerability	9 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-45612	9 Oct 202310:20	–	cvelist
Kitploit	Cve-Collector - Simple Latest CVE Collector	1 Nov 202311:30	–	kitploit

NVD

Node

jetbrains ktorRange<2.3.5

[
  {
    "vendor": "JetBrains",
    "product": "Ktor",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.3.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
jetbrains	www.jetbrains.com/privacy-security/issues-fixed/

21 Nov 2024 08:27Current

9.4High risk

Vulners AI Score9.4

CVSS 3.18.6 - 9.8

EPSS0.00003

SSVC

CWE-611