Junglewise Threat Intelligence

CVE-2021-29479: Cached redirect poisoning via X-Forwarded-Host header

CVE-2021-29479 · Severity: low · CVSS 3.1 · Published 2021-07-01

Technologies: io.ratpack:ratpack-core (Maven). Vendors: Maven.

Executive brief

Cached redirect poisoning via X-Forwarded-Host header

Affected products

Maven io.ratpack:ratpack-core

Related threats

Remote Code Execution Vulnerability in Session Storage
Default development error handler in Ratpack is vulnerable to HTML content injection (XSS)
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')