Executive brief
Ratpack's default client side session signing key is highly predictable
Affected products
- Maven io.ratpack:ratpack-session
Junglewise Threat Intelligence
CVE-2021-29480 · Severity: low · CVSS 3.1 · Published 2021-07-01
Technologies: io.ratpack:ratpack-session (Maven). Vendors: Maven.
Ratpack's default client side session signing key is highly predictable