Description

An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.

Remediation

References

https://github.com/ratpack/ratpack/commit/c560a8d10cb8bdd7a526c1ca2e67c8f224ca23ae

https://github.com/ratpack/ratpack/releases/tag/v1.7.5

https://github.com/ratpack/ratpack/security/advisories/GHSA-mvqp-q37c-wf9j

https://ratpack.io/versions/1.7.5

https://github.com/ratpack/ratpack/commit/efb910d38a96494256f36675ef0e5061097dd77d

Related Vulnerabilities

CVE-2023-26920 Vulnerability in npm package fast-xml-parser

CVE-2021-21304 Vulnerability in npm package dynamoose

CVE-2022-25907 Vulnerability in npm package ts-deepmerge

CVE-2021-29620 Vulnerability in maven package com.epam.reportportal:service-api

CVE-2023-45885 Vulnerability in npm package openmct

Severity

High

Classification

CWE-74 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Patch Release Notes Third Party Advisory Vendor Advisory