Skip to content
OpenAdvisories

Package · Maven

io.ratpack:ratpack-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2021-29479

    Cached redirect poisoning via X-Forwarded-Host header

    Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a user supplied `X-Forwarded-Host` header can be used to perform cache poisoning of a cache fronting a Ratpack server if the cache key does not include the `X-Forwarded-Host` head…

    ratpack ratpack io.ratpack:ratpack-core Maven
  • High 7.5
    CVE-2019-17513 Public exploit

    io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')

    An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Resp…

    io.ratpack:ratpack-core Maven