CVE-2024-49580

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-49580

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

I

n JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure

References
Link Resource
https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*
History

06 Dec 2024, 14:15

Type Values Removed Values Added
Summary (en) In JetBrains Ktor before 3.0.0 improper caching in HttpCache Plugin could lead to response information disclosure (en) In JetBrains Ktor before 2.3.13 improper caching in HttpCache Plugin could lead to response information disclosure

14 Nov 2024, 19:25

Type Values Removed Values Added
CPE cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
References () https://www.jetbrains.com/privacy-security/issues-fixed/ - () https://www.jetbrains.com/privacy-security/issues-fixed/ - Vendor Advisory
First Time Jetbrains ktor
Jetbrains

18 Oct 2024, 12:52

Type Values Removed Values Added
Summary
  • (es) En JetBrains Ktor anterior a la versión 3.0.0, el almacenamiento en caché incorrecto en el complemento HttpCache podría provocar la divulgación de información de respuesta

17 Oct 2024, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-17 13:15

Updated : 2024-12-06 14:15

NVD link : CVE-2024-49580

Mitre link : CVE-2024-49580

CVE.ORG link : CVE-2024-49580

JSON object : View

Products Affected

jetbrains

CWE
CWE-524

Use of Cache Containing Sensitive Information

NVD-CWE-Other