JetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-38179 · ADVISORY
• ktorio/ktor#3110 · WEB
• ktorio/ktor · PACKAGE
• jetbrains.com/privacy-security/issues-fixed · WEB
• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

io.ktor:ktor のその他の脆弱性

• CVE-2022-38180中 6.5In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases