Vulnerabilities

TI-2021-10198 CVE-2021-29485 · GHSA-hc33-32vw-rpp9

Remote Code Execution Vulnerability in Session Storage

MEDIUM 46

Ratpack is a toolkit for creating web applications.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01989 Published 2021-06-29 Fixed in 1.9.0 CWE-502

TI-2021-10194 CVE-2021-29481 · GHSA-phj8-4cq3-794g

LOW 33

Ratpack is a toolkit for creating web applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2021-06-29 Fixed in 1.9.0 CWE-312

TI-2021-10193 CVE-2021-29480 · GHSA-2cc5-23r7-vc4v

LOW 20

Ratpack is a toolkit for creating web applications.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00262 Published 2021-06-29 Fixed in 1.9.0 CWE-340

TI-2021-10192 CVE-2021-29479 · GHSA-w6rq-6h34-vh7q

LOW 32

Ratpack is a toolkit for creating web applications.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00857 Published 2021-06-29 Fixed in 1.9.0 CWE-807

TI-2019-08035 CVE-2019-10770 · GHSA-r2wf-q3x4-hrv9

LOW 29

All versions of io.ratpack:ratpack-core from 0.9.10 inclusive and before 1.7.6 are vulnerable to Cross-site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00857 Published 2020-01-28 Fixed in 1.7.6 CWE-79