GHSA-hccx-cg4v-hrjx

ghsaUSosv

JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider

view advisory published 2022-08-13Licence: CC-BY-4.0

In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-38180US	medium6.5	0.73% (54th)	—	2022-08-12
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.