GHSA-HC33-32VW-RPP9 Remote Code Execution Vulnerability in Session Storage

Impact A malicious attacker can achieve Remote Code Execution RCE via a maliciously crafted Java deserialization gadget chain leveraged against the Ratpack session store. If your application does not use Ratpack's session mechanism, it is not vulnerable. Details Attackers with the ability to writ...

io.ratpack:ratpack-codahale-metrics (0.9.10), io.ratpack:ratpack-groovy (0.9.10) +16 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.10)

io.ratpack:ratpack-core MAVEN version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.10 - io.ratpack:ratpack-groovy 0.9.10 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.11), io.ratpack:ratpack-groovy (0.9.11) +16 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.11)

io.ratpack:ratpack-core MAVEN version 0.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.11 - io.ratpack:ratpack-groovy 0.9.11 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.6), io.ratpack:ratpack-groovy (0.9.6) +15 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.6)

io.ratpack:ratpack-core MAVEN version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.6 - io.ratpack:ratpack-groovy 0.9.6 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.9), io.ratpack:ratpack-groovy (0.9.9) +16 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.9)

io.ratpack:ratpack-core MAVEN version 0.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.9 - io.ratpack:ratpack-groovy 0.9.9 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.4), io.ratpack:ratpack-groovy (0.9.4) +14 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.4)

io.ratpack:ratpack-core MAVEN version 0.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.4 - io.ratpack:ratpack-groovy 0.9.4 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.7), io.ratpack:ratpack-groovy (0.9.7) +15 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.7)

io.ratpack:ratpack-core MAVEN version 0.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.7 - io.ratpack:ratpack-groovy 0.9.7 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.2.7, <=2.3.8), io.ratpack:ratpack-codahale-metrics (0.9.17) +17 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.17)

io.ratpack:ratpack-core MAVEN version 0.9.17 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.2.7, =2.3.8 - io.ratpack:ratpack-codahale-metrics 0.9.17 -...

io.ratpack:ratpack-codahale-metrics (0.9.8), io.ratpack:ratpack-groovy (0.9.8) +15 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.8)

io.ratpack:ratpack-core MAVEN version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.8 - io.ratpack:ratpack-groovy 0.9.8 - io.ratpack:ratpack-groovy-test 0.9....

com.bertramlabs.plugins:ratpack-asset-pipeline (2.5.1), io.jdev.miniprofiler:miniprofiler-ratpack (>=0.5, <=0.5.1) +18 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.19)

io.ratpack:ratpack-core MAVEN version 0.9.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline 2.5.1 - io.jdev.miniprofiler:miniprofiler-ratpack =0.5, =0.5.1 -...

com.bertramlabs.plugins:ratpack-asset-pipeline (>=2.3.11, <=2.4.3), io.ratpack:ratpack-codahale-metrics (0.9.18) +17 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.18)

io.ratpack:ratpack-core MAVEN version 0.9.18 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - com.bertramlabs.plugins:ratpack-asset-pipeline =2.3.11, =2.4.3 - io.ratpack:ratpack-codahale-metrics 0.9.18 -...

io.ratpack:ratpack-codahale-metrics (0.9.1), io.ratpack:ratpack-groovy (0.9.1) +11 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.1)

io.ratpack:ratpack-core MAVEN version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.1 - io.ratpack:ratpack-groovy 0.9.1 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.5), io.ratpack:ratpack-groovy (0.9.5) +15 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.5)

io.ratpack:ratpack-core MAVEN version 0.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.5 - io.ratpack:ratpack-groovy 0.9.5 - io.ratpack:ratpack-groovy-test 0.9....

Remote Code Execution Vulnerability in Session Storage

Impact A malicious attacker can achieve Remote Code Execution RCE via a maliciously crafted Java deserialization gadget chain leveraged against the Ratpack session store. If your application does not use Ratpack's session mechanism, it is not vulnerable. Details Attackers with the ability to writ...

io.ratpack:ratpack-codahale-metrics (0.9.0), io.ratpack:ratpack-groovy (0.9.0) +10 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.0)

io.ratpack:ratpack-core MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.0 - io.ratpack:ratpack-groovy 0.9.0 - io.ratpack:ratpack-groovy-test 0.9....

io.ratpack:ratpack-codahale-metrics (0.9.16), io.ratpack:ratpack-groovy (0.9.16) +16 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.16)

io.ratpack:ratpack-core MAVEN version 0.9.16 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.16 - io.ratpack:ratpack-groovy 0.9.16 - io.ratpack:ratpack-groovy-test...

io.ratpack:ratpack-codahale-metrics (0.9.3), io.ratpack:ratpack-groovy (0.9.3) +14 more potentially affected by CVE-2021-29485 via io.ratpack:ratpack-core (0.9.3)

io.ratpack:ratpack-core MAVEN version 0.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.ratpack:ratpack-core and may be impacted: - io.ratpack:ratpack-codahale-metrics 0.9.3 - io.ratpack:ratpack-groovy 0.9.3 - io.ratpack:ratpack-groovy-test 0.9....

Unspecified vulnerability in Ratpack (CNVD-2021-52414)

Ratpack is a Java library for building scalable HTTP applications. A security vulnerability exists in Ratpack versions prior to 1.9.0, which stems from a default configuration of a client session that results in unencrypted but signed data being set as a cookie value. An attacker could exploit th...

Ratpack has an unspecified vulnerability

Ratpack is a Java library for building scalable HTTP applications. A security vulnerability exists in versions of Ratpack prior to 1.9.0, which can be exploited by attackers to force a cache redirection to their site...

Unspecified vulnerability in Ratpack (CNVD-2021-52416)

Ratpack is a Java library for building scalable HTTP applications. A security vulnerability exists in Ratpack versions prior to 1.9.0, which can be exploited by an attacker to achieve remote code execution via a maliciously crafted chain of Java deserialization gadgets targeting Ratpack session...