medium6.5
CVE-2022-38180
JetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider
Impact
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.ktor:ktor | < 2.1.0 | 2.1.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jetbrains | Ktor | before 2.1.0 |