CVE-2023-45613

概要

参考情報

• jetbrains.com/privacy-security/issues-fixed · Patch

ktor のその他の脆弱性

• CVE-2025-29904中 5.3In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible
• CVE-2024-49580中 5.3In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
• CVE-2023-45612緊急 9.8In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
• CVE-2023-34339低 3.3In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message
• CVE-2022-48476高 7.5In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible