CVE-2019-19389

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

CVE-2019-19389

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

CVE-2019-19389: Improper Neutralization of Special Elements in Output Used by a Downstream Component

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

PT-2019-15836

Name of the Vulnerable Software and Affected Versions JetBrains Ktor framework versions prior to 1.2.6 Description The issue allows for HTTP Response Splitting. Recommendations For versions prior to 1.2.6, update to version 1.2.6 or later to resolve the issue...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

Authorization

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

The CVE-2019-19703 entry concerns the Ktor framework (through version 1.2.6) where the client resends data from the HTTP Authorization header to a redirect location, creating an open-redirect risk. Connected sources (Red Hat, GitHub advisories, OSV, and CVE lists) consistently describe this Issue...

PT-2019-15921

Name of the Vulnerable Software and Affected Versions Ktor versions prior to 1.3.0 Description The issue concerns the client resending data from the HTTP Authorization header to a redirect location. Recommendations For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the issue...

CVE-2019-19703: URL Redirection to Untrusted Site

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

JetBrains Ktor framework input validation error vulnerability

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An input validation error vulnerability exists in JetBrains Ktor framework. An attacker could exploit this vulnerability to execute commands...

Unspecified vulnerability in JetBrains Ktor framework

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An unspecified vulnerability exists in JetBrains Ktor framework. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2019-12736

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

CVE-2019-12737

UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials...

CVE-2019-12736

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

CVE-2019-12737

UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials...

Command injection

JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection...

CVE-2019-12736

CVE-2019-12736 affects JetBrains Kotlin Ktor framework prior to 1.2.0-rc, where the LDAP username is not sanitized, enabling command injection. Impact described as significant; next steps require upgrading to 1.2.0-rc or 1.2.0 (fixes included). If exploitation details are not provided in the sour...