KT
Product
Ktor
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 13Low 2
Watch
Add Ktor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45612 | 9.8 | Oct 9 | In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE Affected: before 2.3.5 |
| CVE-2019-12736 | 9.8 | Oct 2 | JetBrains Ktor framework before 1.2.0-rc does not sanitize the username provided by the user for the LDAP protocol, leading to command injection Affected: through 1.1.5 |
| CVE-2023-45613 | 9.1 | Oct 9 | In JetBrains Ktor before 2.3.5 server certificates were not verified Affected: before 2.3.5 |
Showing 3