Vulnerabilities

TI-2021-10198 CVE-2021-29485 · GHSA-hc33-32vw-rpp9

Remote Code Execution Vulnerability in Session Storage

MEDIUM 46

Ratpack is a toolkit for creating web applications.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01989 Published 2021-06-29 Fixed in 1.9.0 CWE-502

TI-2021-10194 CVE-2021-29481 · GHSA-phj8-4cq3-794g

LOW 33

Ratpack is a toolkit for creating web applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2021-06-29 Fixed in 1.9.0 CWE-312

TI-2021-10193 CVE-2021-29480 · GHSA-2cc5-23r7-vc4v

LOW 20

Ratpack is a toolkit for creating web applications.

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00262 Published 2021-06-29 Fixed in 1.9.0 CWE-340

TI-2021-10192 CVE-2021-29479 · GHSA-w6rq-6h34-vh7q

LOW 32

Ratpack is a toolkit for creating web applications.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00857 Published 2021-06-29 Fixed in 1.9.0 CWE-807

TI-2019-13058 CVE-2019-17513 · GHSA-mvqp-q37c-wf9j

LOW 37

An issue was discovered in Ratpack before 1.7.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02153 Published 2019-10-18 Fixed in 1.7.5 CWE-74

TI-2019-08846 CVE-2019-11808 · GHSA-54mg-vgrp-mwx9

LOW 20

Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom.

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.01315 Published 2019-05-07 Fixed in 1.6.1 CWE-338