HTTP Response Splitting Vulnerability in JetBrains Ktor Framework

CVE-2019-19389

What is CVE-2019-19389?

The JetBrains Ktor framework, prior to version 1.2.6, contains a vulnerability that allows for HTTP Response Splitting attacks. This flaw can be exploited by an attacker to inject headers into the HTTP response, potentially leading to various types of malicious activities such as cache poisoning and user session hijacking. It's crucial for users of the Ktor framework to upgrade to version 1.2.6 or later to mitigate these risks and ensure their applications remain secure.

References