Unrated
In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.
CVE-2021-25761
First seen on SecPulse
References
- advisory blog.jetbrains.com
- web blog.jetbrains.com