[KAFKA-15503] CVE-2023-40167, CVE-2023-36479 - Upgrade jetty to 9.4.52, 10.0.16, 11.0.16, 12.0.1

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.6.0
• Fix Version/s: 3.6.0
• Labels: CVE security
• Assignee: Divij Vaidya
• Reporter: Rafael Rios Saavedra
• Created: 25/Sep/23 17:38
• Updated: 25/Sep/23 17:40
• Resolved: 25/Sep/23 17:40

Description

CVE-2023-40167 and CVE-2023-36479 vulnerabilities affects Jetty version 9.4.51. For more information see https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40167 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-364749 

Upgrading to Jetty version 9.4.52, 10.0.16, 11.0.16, 12.0.1 should address this issue.

Issue Links

• is a clone of: KAFKA-15487 CVE-2023-40167, CVE-2023-36479 - Upgrade jetty to 9.4.52, 10.0.16, 11.0.16, 12.0.1