Upgrade Jetty 11.0.15 to 11.0.17 due to vulnerability CVE-2023-44487

Current Situation

• JS7 JOC Cockpit ships with Jetty 11.0.15
• A vulnerability affects this library:: https://nvd.nist.gov/vuln/detail/CVE-2023-44487

Impact

• We rate the impact to our software being low as JS7 JOC ships with Jetty and the default usage of HTTP/1.
• Customers using HTTP/2 need to configure this on their own and therefore have to take appropriate measures themselves.

Desired Behavior

• JS7 JOC Cockpit should ship with the latest version 11.0.17 of Jetty which contains an improvement for the vulnerability issue.
  • https://github.com/jetty/jetty.project/issues/10679
  • https://github.com/jetty/jetty.project/pull/10680 
  • https://github.com/jetty/jetty.project/releases?q=11.0.17&expanded=true