CVE Feed

    Dashboard / CVE / CVE-2022-38180

    CVE-2022-38180

    In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases

    Published:Aug 12, 2022
    Last Modified:Nov 21, 2024
    EPS:Aug 12, 2022
    EPSS Score:0.00003
    CVSS Score:5.3

    Affected Products

    Vendor
    Jetbrains
    Product
    Ktor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2026-68762 (CVSS 5.9) — In JetBrains Ktor before 3.4.1 potential DoS attack via WebSocket decompression was possible…
    CVE-2025-29904 (CVSS 5.3) — In JetBrains Ktor before 3.1.1 an HTTP Request Smuggling was possible…
    CVE-2024-49580 (CVSS 5.3) — In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclo…
    CVE-2023-45613 (CVSS 6.8) — In JetBrains Ktor before 2.3.5 server certificates were not verified…
    CVE-2023-45612 (CVSS 8.6) — In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to X…
    CVE-2023-34339 (CVSS 3.3) — In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's messag…
    CVE-2022-48476 (CVSS 7.5) — In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible …
    CVE-2022-38179 (CVSS 4.7) — JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack…
    CVE-2022-29930 (CVSS 8.7) — SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor v…
    CVE-2022-29035 (CVSS 3.3) — In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRand…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High