CVE-2020-26129

概要

参考情報

• blog.jetbrains.com · Vendor Advisory
• blog.jetbrains.com/2020/11/16/jetbrains-security-bulletin-q3-2020 · Vendor Advisory

ktor のその他の脆弱性

• CVE-2025-29904中 5.3In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible
• CVE-2024-49580中 5.3In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
• CVE-2023-45613緊急 9.1In JetBrains Ktor before 2.3.5 server certificates were not verified
• CVE-2023-45612緊急 9.8In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
• CVE-2023-34339低 3.3In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message