CVE-2019-19703: URL Redirection to Untrusted Site ('Open Redirect')

February 12, 2020 (updated August 19, 2021)

In Ktor through 1.2.6, the client resends data from the HTTP Authorization header to a redirect location.

References

github.com/advisories/GHSA-xwgq-pcqx-hpmv
github.com/ktorio/ktor/commit/0c108156f45423d09014b47be810188629cb878f
github.com/ktorio/ktor/issues/1467
nvd.nist.gov/vuln/detail/CVE-2019-19703

Code Behaviors & Features

Detect and mitigate CVE-2019-19703 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →