diff --git a/advisories/unreviewed/2024/10/GHSA-8qv4-773j-c979/GHSA-8qv4-773j-c979.json b/advisories/unreviewed/2024/10/GHSA-8qv4-773j-c979/GHSA-8qv4-773j-c979.json index b474d20db1295..225b82e052076 100644 --- a/advisories/unreviewed/2024/10/GHSA-8qv4-773j-c979/GHSA-8qv4-773j-c979.json +++ b/advisories/unreviewed/2024/10/GHSA-8qv4-773j-c979/GHSA-8qv4-773j-c979.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-8qv4-773j-c979", - "modified": "2024-10-17T15:31:08Z", + "modified": "2024-10-17T15:31:19Z", "published": "2024-10-17T15:31:08Z", "aliases": [ "CVE-2024-49580" ], + "summary": "Use of Cache Containing Sensitive Information in Ktor Client with HttpCache plugin", "details": "In JetBrains Ktor before 3.0.0 improper caching in HttpCache Plugin could lead to response information disclosure", "severity": [ { @@ -14,16 +15,42 @@ } ], "affected": [ - + { + "package": { + "ecosystem": "Maven", + "name": "io.ktor:ktor-client-core-jvm" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.0.0" + } + ] + } + ] + } ], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49580" }, + { + "type": "WEB", + "url": "https://github.com/ktorio/ktor/commit/d6c3a51df169c163e8f0b9ce77bbe543c70116ac" + }, { "type": "WEB", "url": "https://www.jetbrains.com/privacy-security/issues-fixed" + }, + { + "type": "WEB", + "url": "https://youtrack.jetbrains.com/issue/KTOR-7483" } ], "database_specific": {