[CXF-9068] Vulnerability (Denial of Service) in jetty server

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Information Provided
• Affects Version/s: 4.0.5
• Component/s: Transports
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Milan Siebenbürger
• Created: 16/Oct/24 08:02
• Updated: 03/Dec/24 13:50
• Resolved: 16/Oct/24 12:10

Description

Hello,

 

snyk.io has discovered a vulnerability in Jetty Server (https://security.snyk.io/vuln/SNYK-JAVA-ORGECLIPSEJETTY-8186142 ), which was introduced via org.apache.cxf:cxf-rt-transports-http-jetty@4.0.5 

 

Is it possible to fix or mitigate this issue?

thanks

Milan Siebenbürger