~ / search / GHSA-xwgq-pcqx-hpmv

GHSA-xwgq-pcqx-hpmv

URL Redirection to Untrusted Site (Open Redirect) in Ktor

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-19703

Packages

EcosystemPackageAffectedFixed in
Maven io.ktor:ktor-client-core < 1.3.0 1.3.0

Details

As written in the advisory (Markdown source, shown as plain text).

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.

References

External links from the advisory. They lead to third-party sites.