Description

In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases

Remediation

References

https://github.com/ktorio/ktor/pull/3092

https://www.jetbrains.com/privacy-security/issues-fixed/

Related Vulnerabilities

CVE-2022-30618 Vulnerability in npm package strapi

CVE-2021-20085 Vulnerability in npm package backbone-query-parameters

CVE-2023-0835 Vulnerability in npm package markdown-pdf

CVE-2016-6817 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2016-10556 Vulnerability in npm package sequelize

Severity

High

Classification

CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Tags

Third Party Advisory Vendor Advisory