CVE-2026-123319

LOW NVD

CVSS Score 3.7

Severity LOW

Published Nov 06, 2026

Vendor unknown

Description

In JetBrains Ktor before 3.6.1 missing Domain attribute validation in client cookie storage allowed cookie injection