213 matches found
CVE-2021-43203
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...
CVE-2021-43203
CVE-2021-43203 affects JetBrains Ktor prior to 1.6.4, where nonce verification in the OAuth2 authentication flow is implemented improperly. This can undermine the integrity of the OAuth2 nonce check, exposing an authentication risk as described in multiple sources (Red Hat and CNVD mirrors) and s...
CVE-2021-43203
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly...
JetBrains Ktor framework 授权问题漏洞
JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...
Unspecified vulnerability in Jetbrains JetBrains Ktor framework
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains Jetbrains. A security vulnerability exists in JetBrains Ktor before 1.5.0, which stems from the fact that a birthday attack on SessionStorage keys is possible. No details of the vulnerability are provided at...
JetBrains Ktor Default Configuration Issue Vulnerability
JetBrains Ktor is a web application framework from the Czech company JetBrains. A default configuration issue vulnerability exists in versions of JetBrains Ktor prior to 1.4.2, which stems from the fact that the weak password suite is enabled by default. No details of the vulnerability are provid...
JetBrains Ktor HTTP Request Smuggling Vulnerability
Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25762
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25762
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
CVE-2021-25761
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
CVE-2021-25761
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
Default credentials
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
Code injection
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
Design/Logic Flaw
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25762
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
CVE-2021-25762
CVE-2021-25762 details (concrete): In JetBrains Ktor before 1.4.3, an HTTP Request Smuggling vulnerability exists. The issue affects the Ktor component of JetBrains products prior to version 1.4.3, as documented in multiple feeds including Red Hat and CVE databases, and was listed in JetBrains Se...