4 matches found
CVE-2023-45613
In JetBrains Ktor before 2.3.5 server certificates were not verified
CVE-2022-48476
In JetBrains Ktor before 2.3.0 path traversal in the resolveResource method was possible
CVE-2023-45612
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
CVE-2023-34339
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message