4 results · Clear filters · Feed
-
High 8.1
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
-
High 8.6CVE-2023-45612 Public exploit
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
-
High 7.5
In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible
-
High 8.7
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.…