Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
2.5.5, 2.6.2
-
None
-
None
-
CVE-2023-42503
Description
Current Situation
- JS7 Agent and JOC Cockpit ship with 3rd party library commons-compress v1.22.
- A vulnerability affects this version.
Impact
We rate the impact to our software as low as our implementation does not make use of the combination of classes to read files from a filesystem.
Desired Behavior
JS7 Agent and JOC Cockpit should use the latest version 1.24.0 of commons-compress which fixes the vulnerability.