Skip to content
OpenAdvisories

Product · JetBrains

Ktor

14 known vulnerabilities.

4 results · Clear filters · Feed

  • High 8.1

    In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

  • High 8.6
    CVE-2023-45612 Public exploit

    In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE

  • High 7.5

    In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible

  • High 8.7

    SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.…