CVE-2023-45612

Summary

CVE-2023-45612 is a vulnerability affecting JetBrains Ktor before version 2.3.5. This issue involves the default configuration of ContentNegotiation, which is susceptible to XML External Entity (XXE) attacks. An attacker could exploit this weakness by injecting malicious XML code, potentially leading to information disclosure or other unintended actions. Developers using Ktor are advised to update to the latest version or implement proper XML security measures to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.