Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-17513
HistoryOct 18, 2019 - 3:15 a.m.

Design/Logic Flaw

2019-10-1803:15:00
PRIOn knowledge base
www.prio-n.com
3

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.

CPENameOperatorVersion
ratpacklt1.7.5

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.8%

Related for PRION:CVE-2019-17513