medium6.1
CVE-2019-19703
URL Redirection to Untrusted Site (Open Redirect) in Ktor
Impact
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.ktor:ktor-client-core | <= 1.2.6 | 1.3.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Ktor | through 1.2.6 |