[KARAF-7520] Stepup pax web Jetty to solve multiple CVEs

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Not A Problem
• Affects Version/s: 4.4.0, 4.3.7
• Component/s: karaf
• Labels: vulnerability
• Assignee: Unassigned
• Reporter: Karthick
• Created: 11/Jul/22 05:55
• Updated: 25/Sep/22 12:39
• Resolved: 11/Jul/22 07:34

Description

Hi,

 

There are multiple vulnerabilities reported on Jetty 9.4.46 that could be solved by lifting them to new versions. See the following issues

https://nvd.nist.gov/vuln/detail/CVE-2022-2047

https://github.com/eclipse/jetty.project/security/advisories/GHSA-wgmr-mf83-7x4j

https://nvd.nist.gov/vuln/detail/CVE-2022-2191