5.3
CVSS
In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible
Severity: MEDIUM
📦
ktor
Vendor: jetbrains
Actively Exploited
0
CISA KEV List
PoC / Exploits
1
Code Available
Total RCEs
1
Remote Access
Total CVEs
23
Total Indexed
Avg. EPSS
0.69%
Exploit Prob.
Security Vulnerability Index
Page 1 / 3
5.3
CVSS
In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
Severity: MEDIUM
6.8
CVSS
In JetBrains Ktor before 2.3.5 server certificates were not verified
Severity: MEDIUM
8.6
CVSS
CVE-2023-45612
Exploit Found
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
Severity: HIGH
3.3
CVSS
In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message
Severity: LOW
7.5
CVSS
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
Severity: HIGH
5.3
CVSS
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
Severity: MEDIUM
4.7
CVSS
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack
Severity: MEDIUM
8.7
CVSS
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1.
Severity: HIGH
3.3
CVSS
In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations
Severity: LOW