CVE-2019-17513

An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://github.com/ratpack/ratpack/commit/c560a8d10cb8bdd7a526c1ca2e67c8f224ca23ae	Patch
https://github.com/ratpack/ratpack/commit/efb910d38a96494256f36675ef0e5061097dd77d	Patch
https://github.com/ratpack/ratpack/releases/tag/v1.7.5	Release Notes Third Party Advisory
https://github.com/ratpack/ratpack/security/advisories/GHSA-mvqp-q37c-wf9j	Third Party Advisory
https://ratpack.io/versions/1.7.5	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ratpack_project:ratpack:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-10-18 03:15

Updated : 2024-02-28 17:28

NVD link : CVE-2019-17513

Mitre link : CVE-2019-17513

CVE.ORG link : CVE-2019-17513

JSON object : View

Products Affected

ratpack_project

ratpack

CWE

CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

{"id": "CVE-2019-17513", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-10-18T03:15:09.897", "references": [{"url": "https://github.com/ratpack/ratpack/commit/c560a8d10cb8bdd7a526c1ca2e67c8f224ca23ae", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/ratpack/ratpack/commit/efb910d38a96494256f36675ef0e5061097dd77d", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://github.com/ratpack/ratpack/releases/tag/v1.7.5", "tags": ["Release Notes", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/ratpack/ratpack/security/advisories/GHSA-mvqp-q37c-wf9j", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://ratpack.io/versions/1.7.5", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-74"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Ratpack versiones anteriores a 1.7.5. Debido al uso inapropiado de la clase DefaultHttpHeaders de la biblioteca Netty, no existe comprobaci\u00f3n de que los encabezados carezcan de caracteres de control HTTP. Por lo tanto, si son utilizados datos no confiables para construir encabezados HTTP con Ratpack, puede ocurrir una divisi\u00f3n de respuesta HTTP."}], "lastModified": "2020-08-24T17:37:01.140", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ratpack_project:ratpack:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5231F6E-1DD7-4BAD-A308-AA82E90B84DD", "versionEndExcluding": "1.7.5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}