Description
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.ktor:ktor-client-core | < 1.3.0 | 1.3.0 | GHSA-xwgq-pcqx-hpmv |
Medium · 6.1
CVE-2019-19703
EUVD-2020-0322GHSA-xwgq-pcqx-hpmv
URL Redirection to Untrusted Site (Open Redirect) in Ktor
Published Dec 10, 2019 · Updated Aug 5, 2024 · Assigned by mitre