CVE-2025-29904

概要

参考情報

• jetbrains.com/privacy-security/issues-fixed · Issue Tracking

ktor のその他の脆弱性

• CVE-2024-49580中 5.3In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
• CVE-2023-45613緊急 9.1In JetBrains Ktor before 2.3.5 server certificates were not verified
• CVE-2023-45612緊急 9.8In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE
• CVE-2023-34339低 3.3In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message
• CVE-2022-48476高 7.5In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible