Description
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Ktor | < 2.3.5 | 2.3.5 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 7 repositories
-
stefan-500/ktor-cve-2023-45612-poc ★ 1 · Nov 7, 2025
Ktor XXE Injection Proof-of-Concept (CVE-2023-45612)
-
aecelen/ktor-xxe-poc ★ 1 · Oct 15, 2025
PoC for CVE-2023-45612
-
infernosalex/CVE-2023-45612-PoC ★ 1 · Oct 3, 2025
Proof-of-Concept of CVE-2023-45612
-
ksaweryr/CVE-2023-45612-PoC ★ 0 · Nov 7, 2025
Proof of concept for XXE in Ktor (CVE-2023-45612)
-
seraphimi/ktor-xxe ★ 0 · Nov 4, 2025
CVE-2023-45612 POC and vulnerable project.
-
razvanclaudiu/ktor-xxe-poc ★ 0 · Oct 23, 2025
This repository provides a Proof of Concept for CVE-2023-45612, demonstrating an XML External Entity (XXE) injection vulnerability in JetBrains Ktor versions prior to 2.3.5.
-
clemfavre/cve-2023-45612_exploit ★ 0 · Oct 22, 2025
Reproduction of a high severty security problem that allows XXE (XML eXternal Entity) attacks on Ktor's XML serialization.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.