Skip to content
OpenAdvisories

Vendor

Ktor.io

1 known vulnerabilities.

Products

Ktor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2020-5207

    Request smuggling is possible in Ktor when both chunked TE and content length specified

    In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator.

    Ktor.io Ktor io.ktor:ktor-server-cio io.ktor:ktor-client-cio Maven