Satish Duggana created KAFKA-15503: -------------------------------------- Summary: CVE-2023-40167, CVE-2023-36479 - Upgrade jetty to 9.4.52, 10.0.16, 11.0.16, 12.0.1 Key: KAFKA-15503 URL: https://issues.apache.org/jira/browse/KAFKA-15503 Project: Kafka Issue Type: Bug Affects Versions: 2.7.0, 2.6.1, 3.4.1, 3.6.0, 3.5.1 Reporter: Rafael Rios Saavedra Assignee: Divij Vaidya Fix For: 2.8.0, 2.7.1, 2.6.2, 3.0.0
CVE-2023-40167 and CVE-2023-36479 vulnerabilities affects Jetty version {*}9.4.51{*}. For more information see [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40167] [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-364749] Upgrading to Jetty version *9.4.52, 10.0.16, 11.0.16, 12.0.1* should address this issue. -- This message was sent by Atlassian Jira (v8.20.10#820010)