CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

Design/Logic Flaw

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25762

CVE-2021-25762 details (concrete): In JetBrains Ktor before 1.4.3, an HTTP Request Smuggling vulnerability exists. The issue affects the Ktor component of JetBrains products prior to version 1.4.3, as documented in multiple feeds including Red Hat and CVE databases, and was listed in JetBrains Se...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25762: Inconsistent Interpretation of HTTP Requests

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

PT-2021-16774

Name of the Vulnerable Software and Affected Versions JetBrains Ktor versions prior to 1.4.3 Description The issue allows for HTTP Request Smuggling, which can be exploited. Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue...

JetBrains Security Bulletin Q4 2020

JetBrains News Security JetBrains Security Bulletin Q4 2020 Robert Demmer In the fourth quarter of 2020, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description |...

Jetbrains JetBrains Ktor framework environmental issue vulnerabilities

Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...

Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Node.js.(CVE-2020-8201 CVE-2020-8251 CVE-2020-8252 )

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-8201 DESCRIPTION: Node.js is vulnerable to HTTP request smuggling, caused by CR-to-Hyphen conversion. By sending specially crafted HTTP request headers, an attacker could exploit this...

CentOS 8 : squid:4 (CESA-2020:3623)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:3623 advisory. - squid: HTTP Request Smuggling could result in cache poisoning CVE-2020-15810 - squid: HTTP Request Splitting could result in cache poisoning...

CentOS 8 : haproxy (CESA-2020:1725)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:1725 advisory. - haproxy: HTTP request smuggling issue with transfer-encoding header containing an obfuscated chunked value CVE-2019-18277 - haproxy: HTTP/2...

openSUSE Security Update : nodejs8 (openSUSE-2021-195)

This update for nodejs8 fixes the following issue : - CVE-2020-8287: Fixed an HTTP request smuggling vulnerability bsc1180554. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

CentOS 8 : nginx:1.16 (CESA-2020:5495)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:5495 advisory. - nginx: HTTP request smuggling in configurations with URL redirect used as errorpage CVE-2019-20372 Note that Nessus has not tested for this issue but has...

CentOS 8 : nodejs:12 (CESA-2020:4272)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4272 advisory. - npm: sensitive information exposure through logs CVE-2020-15095 - nodejs-dot-prop: prototype pollution CVE-2020-8116 - nodejs: HTTP request smuggling...

CentOS 8 : http-parser (CESA-2020:0708)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2020:0708 advisory. - nodejs: HTTP request smuggling using malformed Transfer-Encoding header CVE-2019-15605 Note that Nessus has not tested for this issue but has instead relied...

OPENSUSE-SU-2021:0195-1 Security update for nodejs8

This update for nodejs8 fixes the following issue: - CVE-2020-8287: Fixed an HTTP request smuggling vulnerability bsc1180554. This update was imported from the SUSE:SLE-15:Update update project...

Security update for nodejs8 (moderate)

openSUSE Security Update: Security update for nodejs8 Announcement ID: openSUSE-SU-2021:0195-1 Rating: moderate References: 1180554 Cross-References: CVE-2020-8287 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for nodejs8...