Skip to content
OpenAdvisories

Archive

18 October 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2019-17513 Public exploit

    io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')

    An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Resp…