PT-2025-11038 · Jetbrains · Jetbrains Ktor

Published 2025-03-12 · Updated 2025-11-24 · CVE-2025-29904

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Ktor versions prior to 3.1.1

Description An HTTP Request Smuggling issue exists in JetBrains Ktor. Exploitation of this issue may allow a remote attacker to impact the integrity of protected information due to inconsistent interpretation of HTTP requests.

Recommendations Update JetBrains Ktor to version 3.1.1 or later.

Fix

HTTP Request/Response Smuggling

Weakness Enumeration

CWE-444

Related Identifiers

BDU:2025-12844

CVE-2025-29904

Affected Products

Jetbrains Ktor

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-29904 · Security Note
• https://bdu.fstec.ru/vul/2025-12844 · Security Note
• https://osv.dev/vulnerability/CVE-2025-29904 · Vendor Advisory
• https://t.me/cveNotify/137198 · Telegram Post
• https://twitter.com/CVEnew/status/1899894919189455012 · Twitter Post
• https://t.me/poxek/5698 · Telegram Post
• https://jetbrains.com/privacy-security/issues-fixed · Note