Description
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.
Remediation
References
https://github.com/ktorio/ktor/issues/1467
Related Vulnerabilities
CVE-2020-7760 Vulnerability in npm package codemirror
CVE-2021-43142 Vulnerability in maven package com.wutka:jox
CVE-2020-7708 Vulnerability in npm package @irrelon/path
CVE-2022-2576 Vulnerability in maven package org.eclipse.californium:californium-core
CVE-2023-48089 Vulnerability in maven package com.xuxueli:xxl-job-admin