213 matches found
CVE-2021-25763
CVE-2021-25763 affects JetBrains Ktor prior to 1.4.2, where weak cipher suites were enabled by default in the framework. The issue is described as a default configuration flaw in Ktor’s crypto settings, potentially enabling weaker ciphers for connections. Public reports confirm the vulnerable ver...
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...
CVE-2021-25761
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...
CVE-2021-25761
JetBrains Ktor versions before 1.5.0 are affected by CVE-2021-25761, described as a birthday attack on the SessionStorage key. The issue could enable exploitation of the SessionStorage key, with the affected component being Ktor’s SessionStorage handling. The remediation is to upgrade to Ktor 1.5...
PT-2021-16773 · Jetbrains · Jetbrains Ktor
Name of the Vulnerable Software and Affected Versions: JetBrains Ktor versions prior to 1.5.0 Description: A birthday attack on SessionStorage key was possible, allowing for potential exploitation. Recommendations: For versions prior to 1.5.0, update to version 1.5.0 or later to resolve the issue...
Jetbrains JetBrains Ktor framework 环境问题漏洞
Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...
JetBrains Ktor framework 加密问题漏洞
JetBrains Ktor is a web application framework from the Czech company JetBrains. A default configuration issue vulnerability exists in versions of JetBrains Ktor prior to 1.4.2, which stems from the fact that the weak password suite is enabled by default. No details of the vulnerability are provid...
Jetbrains JetBrains Ktor framework 加密问题漏洞
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains Jetbrains. A security vulnerability exists in JetBrains Ktor before 1.5.0, which stems from the fact that a birthday attack on SessionStorage keys is possible. No details of the vulnerability are provided at...
JetBrains Ktor Environment Issue Vulnerability (CNVD-2021-10498)
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor versions prior to 1.4.1, which stems from HTTP request entrapment attacks are possible. No detailed vulnerability details are provided at this time...
CVE-2020-26129
In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible...
CVE-2020-26129
In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible...
Design/Logic Flaw
In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible...
CVE-2020-26129
CVE-2020-26129 affects JetBrains Ktor before 1.4.1. Multiple sources (NVD entry and connected vendor/security advisories) describe a vulnerability where HTTP request smuggling is possible in affected versions. Details consistently identify the vulnerable component as the Ktor HTTP handling stack ...
CVE-2020-26129
In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible...
JetBrains Ktor framework 环境问题漏洞
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor versions prior to 1.4.1, which stems from HTTP request entrapment attacks are possible. No detailed vulnerability details are provided at this time...
URL Redirection to Untrusted Site (Open Redirect) in Ktor
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...
GHSA-XWGQ-PCQX-HPMV URL Redirection to Untrusted Site (Open Redirect) in Ktor
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...
Jetbrains Ktor Environment Issue Vulnerability
JetBrains Ktor is a web application framework from the Czech company JetBrains. An environmental issue vulnerability exists in Jetbrains Ktor. The vulnerability stems from an unreasonable environmental factor in a web system or product. No detailed vulnerability details are provided at this time...
CRLF Injection
ktor is vulnerable to request smuggling. Lack of validation of the Content-Length and Transfer-Encoding headers allows a remote attacker to inject \n characters as a header separator and smuggle request through the server...