← All advisories

Medium severity4.7NVD Advisory· Published Aug 12, 2022· Updated Jun 17, 2026

CVE-2022-38179

CVE-2022-38179

Description

JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
io.ktor:ktorMaven	< 2.1.0	2.1.0

Affected products

3

Jetbrains/Ktor2 versions
cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*range: <2.1.0
- (no CPE)range: 2.1.0
ghsa-coords
pkg:maven/io.ktor/ktor
Range: < 2.1.0

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-v866-gwf5-w92fghsaADVISORY
github.com/ktorio/ktor/pull/3110nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-38179ghsaADVISORY
www.jetbrains.com/privacy-security/issues-fixed/nvdVendor Advisory
www.jetbrains.com/privacy-security/issues-fixedghsaWEB

News mentions

0

No linked articles in our index yet.