Lucene search
JetbrainsKtor1.1.5
2 matches found
CVE-2019-12736
JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection.
9.8CVSS9.7AI score0.00027EPSS
CVE-2019-12737
UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials.
5.3CVSS5.2AI score0.00002EPSS