Medium · 4.7 CVE-2022-38179 EUVD-2022-6629GHSA-v866-gwf5-w92f

JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack

Published Aug 12, 2022 · Updated Aug 3, 2024 · Assigned by JetBrains

Description

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack

Vendor	Product	Affected	Fixed
JetBrains	Ktor	2.1.0 – < 2.1.0	2.1.0

Ecosystem	Package	Affected	Fixed	Record
Maven	io.ktor:ktor	< 2.1.0	2.1.0	GHSA-v866-gwf5-w92f