Junglewise Threat Intelligence

CVE-2019-10770: Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)

CVE-2019-10770 · Severity: low · CVSS 3.1 · Published 2020-01-27

Technologies: io.ratpack:ratpack-core (Maven). Vendors: Maven.

Executive brief

Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)

Affected products

  • Maven io.ratpack:ratpack-core

Related threats