Ratpack Project

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Ratpack Project records in CISA KEV

No Ratpack Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2021-10198 CVE-2021-29485 · GHSA-hc33-32vw-rpp9

MEDIUM 46

Ratpack is a toolkit for creating web applications.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01989 Published 2021-06-29 Fixed in 1.9.0 CWE-502

TI-2019-13058 CVE-2019-17513 · GHSA-mvqp-q37c-wf9j

LOW 37

An issue was discovered in Ratpack before 1.7.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02153 Published 2019-10-18 Fixed in 1.7.5 CWE-74

TI-2021-10194 CVE-2021-29481 · GHSA-phj8-4cq3-794g

LOW 33

Ratpack is a toolkit for creating web applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2021-06-29 Fixed in 1.9.0 CWE-312

TI-2021-10192 CVE-2021-29479 · GHSA-w6rq-6h34-vh7q

LOW 32

Ratpack is a toolkit for creating web applications.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00857 Published 2021-06-29 Fixed in 1.9.0 CWE-807

TI-2021-10193 CVE-2021-29480 · GHSA-2cc5-23r7-vc4v

LOW 20

Ratpack is a toolkit for creating web applications.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00262 Published 2021-06-29 Fixed in 1.9.0 CWE-340

TI-2019-08846 CVE-2019-11808 · GHSA-54mg-vgrp-mwx9

LOW 20

Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom.

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.01315 Published 2019-05-07 Fixed in 1.6.1 CWE-338