JetBrains Ktor framework 授权问题漏洞

JetBrains Ktor is a web application framework from JetBrains Czech Republic. An authorization issue vulnerability exists in JetBrains Ktor prior to 1.6.4, which stems from improper implementation of nonce authentication in the OAuth2 authentication process. No detailed vulnerability details are...

Unspecified vulnerability in Jetbrains JetBrains Ktor framework

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains Jetbrains. A security vulnerability exists in JetBrains Ktor before 1.5.0, which stems from the fact that a birthday attack on SessionStorage keys is possible. No details of the vulnerability are provided at...

JetBrains Ktor Default Configuration Issue Vulnerability

JetBrains Ktor is a web application framework from the Czech company JetBrains. A default configuration issue vulnerability exists in versions of JetBrains Ktor prior to 1.4.2, which stems from the fact that the weak password suite is enabled by default. No details of the vulnerability are provid...

JetBrains Ktor HTTP Request Smuggling Vulnerability

Ktor is a framework for quickly creating web applications using the Kotlin language . An HTTP request smuggling vulnerability exists in JetBrains Ktor versions prior to 1.4.3. No detailed vulnerability details are provided at this time...

CVE-2021-25763

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25763

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25761

In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...

Code injection

In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...

CVE-2021-25763

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25761

In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible...

Default credentials

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...

Design/Logic Flaw

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25762

CVE-2021-25762 details (concrete): In JetBrains Ktor before 1.4.3, an HTTP Request Smuggling vulnerability exists. The issue affects the Ktor component of JetBrains products prior to version 1.4.3, as documented in multiple feeds including Red Hat and CVE databases, and was listed in JetBrains Se...

CVE-2021-25762

In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible...

CVE-2021-25763

CVE-2021-25763 affects JetBrains Ktor prior to 1.4.2, where weak cipher suites were enabled by default in the framework. The issue is described as a default configuration flaw in Ktor’s crypto settings, potentially enabling weaker ciphers for connections. Public reports confirm the vulnerable ver...

CVE-2021-25763

In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default...

CVE-2021-25761

JetBrains Ktor versions before 1.5.0 are affected by CVE-2021-25761, described as a birthday attack on the SessionStorage key. The issue could enable exploitation of the SessionStorage key, with the affected component being Ktor’s SessionStorage handling. The remediation is to upgrade to Ktor 1.5...