213 matches found
CVE-2020-5207
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...
Code injection
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...
CVE-2020-5207
Kotlin Ktor before 1.3.0 is affected by a request-smuggling issue when behind proxies that mishandle Content-Length/Transfer-Encoding or use an improper header separator. The vulnerability arises from how multiple proxy configurations may allow CRLF or header separator handling to be exploited. I...
CVE-2020-5207 Request smuggling is possible in Ktor when both chunked TE and content length specified
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...
JetBrains Security Bulletin Q4 2019
FYI Security JetBrains Security Bulletin Q4 2019 Robert Demmer In the fourth quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...
JetBrains Ktor framework injection vulnerability
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An injection vulnerability exists in JetBrains Ktor framework versions prior to 1.2.6. The vulnerability stems from a lack of proper validation of user input data by a web system or product during the course...
CVE-2019-19389
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...
CVE-2019-19389
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...
Design/Logic Flaw
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...
CVE-2019-19389
CVE-2019-19389 affects JetBrains Ktor framework prior to version 1.2.6 and is described as an HTTP Response Splitting vulnerability. Red Hat and CNVD entries corroborate the same flaw, with JetBrains’ Q4 2019 security bulletin listing Ktor as affected and noting the issue is resolved in version 1...
CVE-2019-19389
JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...
CVE-2019-19703
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...
CVE-2019-19703
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...
Authorization
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...
CVE-2019-19703
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...
CVE-2019-19703
The CVE-2019-19703 entry concerns the Ktor framework (through version 1.2.6) where the client resends data from the HTTP Authorization header to a redirect location, creating an open-redirect risk. Connected sources (Red Hat, GitHub advisories, OSV, and CVE lists) consistently describe this Issue...
JetBrains Ktor framework input validation error vulnerability
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An input validation error vulnerability exists in JetBrains Ktor framework. An attacker could exploit this vulnerability to execute commands...
Unspecified vulnerability in JetBrains Ktor framework
JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An unspecified vulnerability exists in JetBrains Ktor framework. An attacker can exploit this vulnerability to obtain sensitive information...