CVE-2019-19703 - In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location

MEDIUM

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location

Published Dec 10, 2019

6.1

MEDIUM

CVSS 3.1

EPSS 0.64%

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://github.com/advisories/GHSA-xwgq-pcqx-hpmv		Advisory
https://github.com/ktorio/ktor/commit/0c108156f45423d09014b47be810188629cb878f
https://github.com/ktorio/ktor/issues/1467		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-19703