JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-38180 · ADVISORY
• ktorio/ktor#3092 · WEB
• ktorio/ktor · PACKAGE
• jetbrains.com/privacy-security/issues-fixed · WEB
• jetbrains.com/privacy-security/issues-fixed · Vendor Advisory

io.ktor:ktor のその他の脆弱性

• CVE-2022-38179中 6.1JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack