In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.

Published Nov 9, 2021 · Updated Aug 4, 2024 · Assigned by mitre