Authentication Data Exposure in JetBrains Ktor
CVE-2023-34339
3.3LOW
What is CVE-2023-34339?
In JetBrains Ktor versions prior to 2.3.1, there is a vulnerability that allows sensitive authentication data to be included in the exception messages. This could potentially lead to unauthorized access if the exception messages are logged or intercepted, thereby exposing critical user credentials. It is crucial for developers using Ktor to upgrade to the latest version to mitigate the risks associated with this vulnerability. Ensure that your applications remain secure by staying informed about recent security patches and updates.
Affected Version(s)
Ktor 0 < 2.3.1