CVE-2023-45612 PoC — JetBrains Ktor 代码问题漏洞

Source

https://github.com/bbugdigger/ktor-xxe-poc

Associated Vulnerability

Title: JetBrains Ktor 代码问题漏洞 (CVE-2023-45612)
Description:In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE

Description

Proof-of-Concept of CVE-2023-45612

Readme

# CVE-2023-45612 Reproduction Steps

### My Versions
- **Java 17**
- **Gradle 8.14.3**
- **Python 3.13.7** (for POC script)

### Steps

```
git clone git@github.com:bbugdigger/ktor-xxe-poc.git
cd ktor-xxe-poc
.\gradlew build
.\gradlew run
```

In new tab with same folder destination run PoC script
```
python .\xxe_poc.py
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →