ktor-xxe-poc

ktor-xxe-poc CVE-2023-45612 보안 문제를 재현하는 개념 증명PoC입니다. 사용된 버전 Ktor: 2.2.3 xmlutil: 0.84.3 Java: 17.0.6 Gradle: 9.1.0 Python: 3.13.7 실행 방법 1. 서버를 빌드하고 실행합니다: ./gradlew build ./gradlew run 2. XXE 페이로드를 테스트합니다: python test.py 서버는 http://localhost:8080에서 실행됩니다...

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

Ktor XML XXE Vulnerability Reproduction CVE-2023-45612 Re...

Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor

PoC exploit for CVE-2023-45612, a XXE vulnerability. The target...

CVE-2023-45612

CVE-2023-45612 affects JetBrains Ktor with the ContentNegotiation XML format enabled in versions before 2.3.5. The root cause is an insecure default XML configuration that allows external entity processing, enabling XXE. Exploitation can lead to file disclosure (e.g., reading server files) and SS...