PT-2023-24824 · Jetbrains · Jetbrains Ktor

CVE-2023-34339 · Publicado 2023-06-01 · Atualizado 2023-06-08

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Ktor versions prior to 2.3.1

Description The issue allows headers containing authentication data to be added to the exception's message. This could potentially expose sensitive information.

Recommendations For versions prior to 2.3.1, update to version 2.3.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive authentication data until the update is applied.

Exploit

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2023-34339

Produtos afetados

Jetbrains Ktor

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34339.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-34339 · Aviso do Fabricante
• https://t.me/cibsecurity/64868 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-34339 · Nota de Segurança
• https://jetbrains.com/privacy-security/issues-fixed · Aviso do Fabricante
• https://t.me/cvenotify/51594 · Publicação no Telegram