Archive
18 October 2019
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
High 7.5CVE-2019-17513 Public exploit
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')
An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Resp…