tocsin

CVE-2020-5207

2 advisories.

Maven/io.ktor:ktor-client-cio CVE-2020-5207: medium 5.4

Request smuggling is possible when both chunked TE and content length specified

Action: Upgrade io.ktor:ktor-client-cio to 1.3.0 or later.

Affected

introducedfixedlast affected
01.3.0-

Fixed versions

1.3.0

Sources

CVE-2020-5207 · published · modified · JSON

Maven/io.ktor:ktor-server-cio CVE-2020-5207: medium 5.4

Request smuggling is possible when both chunked TE and content length specified

Action: Upgrade io.ktor:ktor-server-cio to 1.3.0 or later.

Affected

introducedfixedlast affected
01.3.0-

Fixed versions

1.3.0

Sources

CVE-2020-5207 · published · modified · JSON