CVE-2019-17513

CVE-2019-17513 is a high-severity HTTP Response Splitting vulnerability affecting Ratpack versions prior to 1.7.5. It arises from Ratpack's misuse of the Netty library's DefaultHttpHeaders, which fails to validate HTTP control characters in headers. This allows an attacker to inject untrusted data into HTTP headers, potentially leading to response manipulation. The vulnerability has a CVSS score of 7.5, indicating a high impact on integrity with low attack complexity and no user interaction required. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.