Details
-
Fix
-
Status: Released (View Workflow)
-
Minor
-
Resolution: Fixed
-
None
-
None
-
None
-
CVE-2022-23221
Description
Current Situation
- JobScheduler Master, Agent and JOC do not ship with a J2 JDBCÂ Driver and are not affected by this vulnerability.
- see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23221
- Due to a remaining detached test project only, the repository's vulnerability guard warns about existing dependencies.
Desired Behavior
- As JobScheduler Master, Agent and JOC do not ship with a H2 JDBC Driver any current references in the repository should be removed.
Attachments
Issue Links
- is related to
-
JS-1967 Remove support for H2 due to 3rd-party vulnerability issue CVE-2021-23463
- Released