CVE-2022-38179
First published: Fri Aug 12 2022(Updated: )
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack
Credit: cve@jetbrains.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| JetBrains Ktor | <2.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-38179.
What is the severity rating of CVE-2022-38179?
The severity rating of CVE-2022-38179 is medium.
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is 697 and 184.
How does the Reflect File Download attack affect JetBrains Ktor before version 2.1.0?
The Reflect File Download attack affects JetBrains Ktor before version 2.1.0 by allowing an attacker to trick a user into downloading an arbitrary file from the server.
How can I fix the Reflect File Download vulnerability in JetBrains Ktor before version 2.1.0?
To fix the Reflect File Download vulnerability in JetBrains Ktor, you should update to version 2.1.0 or later.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/jetbrains
- canonical/jetbrains ktor