[KAFKA-14107] Upgrade Jetty for CVE fixes

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 2.8.1, 3.0.1, 3.2.0, 3.1.1
• Fix Version/s: 2.8.2, 3.3.0, 3.0.2, 3.1.2, 3.2.3
• Component/s: core
• Labels: security
• Assignee: Andrew Borley
• Reporter: Andrew Borley
• Created: 26/Jul/22 12:28
• Updated: 26/Sep/22 07:05
• Resolved: 05/Aug/22 22:48

Description

There are a couple of CVEs for Jetty:

• [CVE-2022-2048](https://nvd.nist.gov/vuln/detail/CVE-2022-2048)

• [CVE-2022-2047](https://nvd.nist.gov/vuln/detail/CVE-2022-2047)

Fixed by upgrading to 9.4.48.v20220622+

Issue Links

• is duplicated by: KAFKA-14100 Upgrade vulnerable dependencies Kafka version 3.1.1 July 2022
• is related to: KAFKA-14100 Upgrade vulnerable dependencies Kafka version 3.1.1 July 2022
• links to: GitHub Pull Request #12440