In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.

Published Feb 3, 2021 · Updated Aug 3, 2024 · Assigned by mitre