Description

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack

Remediation

References

https://github.com/ktorio/ktor/pull/3110

https://www.jetbrains.com/privacy-security/issues-fixed/

Related Vulnerabilities

CVE-2020-14968 Vulnerability in maven package org.webjars.bower:jsrsasign

CVE-2019-10908 Vulnerability in maven package org.airsonic.player:airsonic-main

CVE-2020-15930 Vulnerability in npm package joplin

CVE-2020-6858 Vulnerability in maven package com.hotels.styx:styx-components

CVE-2017-16066 Vulnerability in npm package opencv.js

Severity

High

Classification

CWE-697 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Third Party Advisory Vendor Advisory