Description
An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.
Remediation
References
https://github.com/ratpack/ratpack/commit/c560a8d10cb8bdd7a526c1ca2e67c8f224ca23ae
https://github.com/ratpack/ratpack/commit/efb910d38a96494256f36675ef0e5061097dd77d
https://github.com/ratpack/ratpack/releases/tag/v1.7.5
https://github.com/ratpack/ratpack/security/advisories/GHSA-mvqp-q37c-wf9j
https://ratpack.io/versions/1.7.5
Related Vulnerabilities
CVE-2022-31172 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2023-40176 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web-templates
CVE-2021-37695 Vulnerability in maven package org.webjars.npm:ckeditor4
CVE-2020-28452 Vulnerability in maven package com.softwaremill.akka-http-session:core_2.11
CVE-2023-29507 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore