Details
-
Fix
-
Status: Released (View Workflow)
-
Medium
-
Resolution: Fixed
-
2.0.0
-
None
-
CVE-2023-36479
Description
Current Situation
- JS7 JOC Cockpit ships with Jetty 11.0.15
- A vulnerability affects this library:: https://nvd.nist.gov/vuln/detail/CVE-2023-36479
Impact
- We rate the impact to our software being low as our implementation does not make use of CGI. There is no exploit for JS7.
Desired Behavior
- JS7 JOC Cockpit should ship with the latest version 11.0.16 of Jetty which fixes the vulnerability.
Attachments
Issue Links
- relates to
-
JOC-1658 Upgrade Jetty 11.0.15 to 11.0.17 due to vulnerability CVE-2023-44487
- Released