Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-5207
5.4
MEDIUMCVSS v3
Published
January 27, 2020
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator.
ktorio/ktor
GitHubFramework for quickly creating connected applications in Kotlin with minimal effort
GitHubFramework for quickly creating connected applications in Kotlin with minimal effort< 1.3.0NVD