204 matches found
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25762
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
Default credentials
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
Code injection
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
Design/Logic Flaw
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25761
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
CVE-2021-25762
CVE-2021-25762 details (concrete): In JetBrains Ktor before 1.4.3, an HTTP Request Smuggling vulnerability exists. The issue affects the Ktor component of JetBrains products prior to version 1.4.3, as documented in multiple feeds including Red Hat and CVE databases, and was listed in JetBrains Se...
CVE-2021-25762
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...
CVE-2021-25763
CVE-2021-25763 affects JetBrains Ktor prior to 1.4.2, where weak cipher suites were enabled by default in the framework. The issue is described as a default configuration flaw in Ktor’s crypto settings, potentially enabling weaker ciphers for connections. Public reports confirm the vulnerable ver...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25761
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
CVE-2021-25761
JetBrains Ktor versions before 1.5.0 are affected by CVE-2021-25761, described as a birthday attack on the SessionStorage key. The issue could enable exploitation of the SessionStorage key, with the affected component being Ktor’s SessionStorage handling. The remediation is to upgrade to Ktor 1.5...
Jetbrains JetBrains Ktor framework 环境问题漏洞
Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...
Jetbrains JetBrains Ktor framework 加密问题漏洞
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains Jetbrains. A security vulnerability exists in JetBrains Ktor before 1.5.0, which stems from the fact that a birthday attack on SessionStorage keys is possible. No details of the vulnerability are provided at...
PT-2021-16773 · Jetbrains · Jetbrains Ktor
Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 1.5.0 Description: A birthday attack on SessionStorage key was possible, allowing for potential exploitation. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue...
JetBrains Ktor framework 加密问题漏洞
JetBrains Ktor is a web application framework from the Czech company JetBrains. A default configuration issue vulnerability exists in versions of JetBrains Ktor prior to 1.4.2, which stems from the fact that the weak password suite is enabled by default. No details of the vulnerability are provid...
JetBrains Ktor Environment Issue Vulnerability (CNVD-2021-10498)
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor versions prior to 1.4.1, which stems from HTTP request entrapment attacks are possible. No detailed vulnerability details are provided at this time...
