CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

creationtimestamp| type| source ---|---|--- 2024-03-10 08:41:54+00:00| seen| https://t.me/ctinow/204147...

ch.softappeal.yass2:yass2-jvm (>=0.1.0 <=0.2.2), com.adamratzman:spotify-api-kotlin (>=3.0.0 <=3.0.03) +77 more potentially affected by CVE-2019-19703 via io.ktor:ktor-client-core (>=1.0.0-rc <=1.3.0-rc2)

io.ktor:ktor-client-core MAVEN version =1.0.0-rc, =0.1.0, =3.0.0, =8.8.0, =1.0.1, =1.0.0, =0.1.0, =0.8, =0.13.0 - com.github.insanusmokrassar:TelegramBotAPI-js =0.21.0 - com.github.insanusmokrassar:TelegramBotAPI-jvm =0.21.0 - com.github.insanusmokrassar:TelegramBotAPI-metadata =0.21.0 -...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

CVE-2019-19703

The CVE-2019-19703 entry concerns the Ktor framework (through version 1.2.6) where the client resends data from the HTTP Authorization header to a redirect location, creating an open-redirect risk. Connected sources (Red Hat, GitHub advisories, OSV, and CVE lists) consistently describe this Issue...