New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

There is a vulnerability in Jetty :: Server Core TTP/2, Servlet, WebSocket Server 8.1.2.v20120308 ,upgrade recommended #296

Closed

QiAnXinCodeSafe opened this issue Oct 15, 2020 · 1 comment

QiAnXinCodeSafe commented Oct 15, 2020

jvm-sandbox/sandbox-core/pom.xml

Lines 134 to 137 in 639aae9

    
               <groupId>org.eclipse.jetty</groupId> 
        
               <artifactId>jetty-server</artifactId> 
        
               <version>8.1.2.v20120308</version> 
        
           </dependency>

CVE-2017-7658 CVE-2017-7657 CVE-2017-9735 CVE-2019-10247
Recommended upgrade version：9.2.30.v20200428

Collaborator

z529192557 commented Apr 19, 2021

We may consider upgrade jetty 8 to jetty 9, but if will lead to unsupport jdk6-7

oldmanpushcart closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment