CVE-2019-17513 PoC — Ratpack 注入漏洞

Source

Associated Vulnerability

Title: Ratpack 注入漏洞 (CVE-2019-17513)
Description:An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.

Description

ratpack with CVE-2019-17513

Readme

[![Build Status](https://circleci.com/gh/ratpack/ratpack/tree/master.svg?style=svg)](https://circleci.com/gh/ratpack/ratpack)
[![codecov.io](http://codecov.io/github/ratpack/ratpack/coverage.svg?branch=master)](http://codecov.io/github/ratpack/ratpack?branch=master)

[![Ratpack.io](/ratpack-site/src/assets/images/ratpack-logo.png?raw=true)](https://ratpack.io)

# What is Ratpack?

Ratpack is a simple, capable, toolkit for creating high performance web applications.

Ratpack is built on Java and the Netty event-driven networking engine. 
The API is optimized for Groovy and Java 8.

Optional Google Guice integration provides a foundation for scaling your application in size in a managed way.

Optional Gradle build time support makes building and testing applications a breeze.

[http://www.ratpack.io](http://www.ratpack.io)

## Looking to contribute?

Please see [CONTRIBUTING.md](https://github.com/ratpack/ratpack/blob/master/CONTRIBUTING.md)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →