Description
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
Remediation
References
https://github.com/ktorio/ktor/pull/3092
https://www.jetbrains.com/privacy-security/issues-fixed/
Related Vulnerabilities
CVE-2022-41940 Vulnerability in maven package org.webjars.bower:engine.io
CVE-2015-7940 Vulnerability in maven package org.bouncycastle:bcprov-ext-jdk14
CVE-2018-12536 Vulnerability in maven package org.eclipse.jetty:jetty-util
CVE-2022-34115 Vulnerability in maven package io.dataease:dataease-plugin-common
CVE-2022-44262 Vulnerability in maven package org.ff4j:ff4j-core