12 matches found
Exploit for Improper Restriction of XML External Entity Reference in Jetbrains Ktor
ktor-xxe This project was created using the Ktor Project Gen...
CVE-2023-34339
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message...
CVE-2020-5207
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...
Unspecified Vulnerability in JetBrains Ktor
JetBrains Ktor is a web framework for building asynchronous servers and clients in Kotlin from the Czech company JetBrains. Used to create microservices, Web applications , etc., build RESTful API. JetBrains Ktor suffers from a security vulnerability that stems from the occurrence of an HTTP...
CVE-2023-45612
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE...
JetBrains Ktor framework 安全漏洞
JetBrains Ktor framework is a web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor framework versions prior to 2.3.1, which stems from a header for authentication data that can be added to an exception message...
JetBrains Ktor framework 授权问题漏洞
JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...
Unspecified vulnerability in Jetbrains JetBrains Ktor framework
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains Jetbrains. A security vulnerability exists in JetBrains Ktor before 1.5.0, which stems from the fact that a birthday attack on SessionStorage keys is possible. No details of the vulnerability are provided at...
JetBrains Ktor HTTP Request Smuggling Vulnerability
Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...
CVE-2019-19389
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...
CVE-2019-19389
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...
CVE-2019-19703
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...