CVE-2024-49580: Medium severity ktor vulnerability
Published Oct 17, 2024
·Updated
Improper caching in JetBrains Ktor before 3.0.0 in the HttpCache Plugin could lead to response information disclosure.
Other sources
In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure
— MITRE
Affected Software
2 affected componentsFixes available
maven/io.ktor:ktor-client-core-jvm<2.3.13
2.3.13
JetBrains Ktor<3.0.0
Event History
Oct 17, 2024
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Advisory Published
via GitHub·03:31 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-49580?
CVE-2024-49580 has been classified with a severity that indicates a potential risk for response information disclosure.
2
How do I fix CVE-2024-49580?
To fix CVE-2024-49580, you should upgrade to JetBrains Ktor version 2.3.13 or later.
3
What versions of JetBrains Ktor are affected by CVE-2024-49580?
CVE-2024-49580 affects JetBrains Ktor versions prior to 3.0.0 and 2.3.13.
4
What does CVE-2024-49580 exploit in JetBrains Ktor?
CVE-2024-49580 exploits improper caching in the HttpCache Plugin of JetBrains Ktor.
5
What could happen if CVE-2024-49580 is not mitigated?
If not mitigated, CVE-2024-49580 could lead to unauthorized disclosure of sensitive response information.