CVE-2020-26129

In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible...

CVE-2020-26129

CVE-2020-26129 affects JetBrains Ktor before 1.4.1. Multiple sources (NVD entry and connected vendor/security advisories) describe a vulnerability where HTTP request smuggling is possible in affected versions. Details consistently identify the vulnerable component as the Ktor HTTP handling stack ...

JetBrains Ktor framework 环境问题漏洞

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. A security vulnerability exists in JetBrains Ktor versions prior to 1.4.1, which stems from HTTP request entrapment attacks are possible. No detailed vulnerability details are provided at this time...

ch.softappeal.yass2:yass2-jvm (>=0.1.0 <=0.2.2), com.adamratzman:spotify-api-kotlin (>=3.0.0 <=3.0.03) +77 more potentially affected by CVE-2019-19703 via io.ktor:ktor-client-core (>=1.0.0-rc <=1.3.0-rc2)

io.ktor:ktor-client-core MAVEN version =1.0.0-rc, =0.1.0, =3.0.0, =8.8.0, =1.0.1, =1.0.0, =0.1.0, =0.8, =0.13.0 - com.github.insanusmokrassar:TelegramBotAPI-js =0.21.0 - com.github.insanusmokrassar:TelegramBotAPI-jvm =0.21.0 - com.github.insanusmokrassar:TelegramBotAPI-metadata =0.21.0 -...

URL Redirection to Untrusted Site (Open Redirect) in Ktor

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

GHSA-XWGQ-PCQX-HPMV URL Redirection to Untrusted Site (Open Redirect) in Ktor

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location...

Jetbrains Ktor Environment Issue Vulnerability

JetBrains Ktor is a web application framework from the Czech company JetBrains. An environmental issue vulnerability exists in Jetbrains Ktor. The vulnerability stems from an unreasonable environmental factor in a web system or product. No detailed vulnerability details are provided at this time...

CRLF Injection

ktor is vulnerable to request smuggling. Lack of validation of the Content-Length and Transfer-Encoding headers allows a remote attacker to inject \n characters as a header separator and smuggle request through the server...

CVE-2020-5207

In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...

CVE-2020-5207

In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...

Code injection

In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...

CVE-2020-5207

Kotlin Ktor before 1.3.0 is affected by a request-smuggling issue when behind proxies that mishandle Content-Length/Transfer-Encoding or use an improper header separator. The vulnerability arises from how multiple proxy configurations may allow CRLF or header separator handling to be exploited. I...

CVE-2020-5207 Request smuggling is possible in Ktor when both chunked TE and content length specified

In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator...

com.cedarsoft.dependencies-sets:ktor-client (>=8.8.0 <=8.9.2), com.github.insanusmokrassar:AutoPostBotLikesPlugin (>=1.2.0 <=1.7.0) +18 more potentially affected by CVE-2020-5207 via io.ktor:ktor-client-cio (>=1.0.0-rc <=1.3.0-rc2)

io.ktor:ktor-client-cio MAVEN version =1.0.0-rc, =8.8.0, =1.2.0, =0.1.1, =1.4.0, =0.15.0, =0.1.0, =1.0.0, =0.1, =1.4.1, =4.0.0, =3.2.0, =1.0.0, =1.0.0, =1.0.0, =1.3.0-rc2 and more Source cves: CVE-2020-5207 Source advisory: OSV:GHSA-XRR9-RH8P-433V...

JetBrains Security Bulletin Q4 2019

FYI Security JetBrains Security Bulletin Q4 2019 Robert Demmer In the fourth quarter of 2019, we resolved a series of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description | Severity |...

JetBrains Ktor framework injection vulnerability

JetBrains Ktor framework is a Web application framework from the Czech company JetBrains. An injection vulnerability exists in JetBrains Ktor framework versions prior to 1.2.6. The vulnerability stems from a lack of proper validation of user input data by a web system or product during the course...

CVE-2019-19389

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

CVE-2019-19389

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

Design/Logic Flaw

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...

CVE-2019-19389

JetBrains Ktor framework before version 1.2.6 was vulnerable to HTTP Response Splitting...