CVE-2019-17513

HIGH

Ratpack < 1.7.5 - HTTP Response Splitting via Unvalidated HTTP Headers

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-17513. PoCs published by epicosy.

AI-analyzed exploit summary This repository appears to be a legitimate Ratpack project but does not contain any exploit code or proof-of-concept for CVE-2019-17513. It includes build configurations, documentation, and source code for the Ratpack framework itself.

Description

An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.

Exploits (1)

nomisec STUB

by epicosy · poc

https://github.com/epicosy/Ratpack-1

View Code ZIP pw:eip

This repository appears to be a legitimate Ratpack project but does not contain any exploit code or proof-of-concept for CVE-2019-17513. It includes build configurations, documentation, and source code for the Ratpack framework itself.

Classification

Stub 95%

Attack Type

Other

Complexity

Trivial

Reliability

Theoretical

Target: Ratpack

No auth needed

devstral-2 · analyzed Feb 19, 2026 Full analysis →