Description

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack

Remediation

References

https://github.com/ktorio/ktor/pull/3110

https://www.jetbrains.com/privacy-security/issues-fixed/

Related Vulnerabilities

CVE-2016-10735 Vulnerability in maven package org.webjars.bowergithub.twbs:bootstrap

CVE-2023-50449 Vulnerability in maven package com.jfinal:jfinal

CVE-2016-10538 Vulnerability in npm package cli

CVE-2023-46660 Vulnerability in maven package org.jenkins-ci.plugins:zanata

CVE-2020-6532 Vulnerability in npm package electron

Severity

High

Classification

CWE-697 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Third Party Advisory Vendor Advisory