Description
In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.
Remediation
References
https://github.com/ktorio/ktor/issues/1467
Related Vulnerabilities
CVE-2023-4316 Vulnerability in maven package org.webjars.npm:zod
CVE-2018-17960 Vulnerability in maven package org.webjars.npm:ckeditor
CVE-2021-45029 Vulnerability in maven package org.apache.shenyu:shenyu-common
CVE-2021-23760 Vulnerability in npm package keyget
CVE-2020-26217 Vulnerability in maven package xstream:xstream