Karthick created KARAF-7770:
-------------------------------
Summary: Update Eclipse Jetty to solve CVE-2023-36478
Key: KARAF-7770
URL: https://issues.apache.org/jira/browse/KARAF-7770
Project: Karaf
Issue Type: Dependency upgrade
Components: karaf
Affects Versions: 4.4.4, 4.4.3
Reporter: Karthick
As per [NVD - CVE-2023-36478
(nist.gov)|https://nvd.nist.gov/vuln/detail/CVE-2023-36478], Eclipse Jetty till
9.4.52 is affected by this vulnerability. To solve it, upgrade to 9.4.53 should
be used. Hence this 3pp update is needed in Karaf.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
