4 matches found
CVE-2021-25762
In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible.
CVE-2021-25763
In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default.
CVE-2021-43203
In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.
CVE-2021-25761
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.