[ZOOKEEPER-4023] dependency-check:check failing - Jetty 9.4.34.v20201102 - CVE-2020-27218

• Type: Task
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 3.7.0, 3.5.8, 3.6.2
• Fix Version/s: 3.5.9, 3.6.3, 3.7.0
• Component/s: server
• Labels: owasp pull-request-available
• Assignee: Damien Diederen
• Reporter: Damien Diederen
• Created: 05/Dec/20 19:45
• Updated: 28/Mar/21 08:55
• Resolved: 24/Dec/20 14:44

Description

[ERROR] Failed to execute goal org.owasp:dependency-check-maven:5.3.0:check (default-cli) on project zookeeper: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '0,0': 
[ERROR] 
[ERROR] jetty-server-9.4.34.v20201102.jar: CVE-2020-27218
[ERROR] jetty-http-9.4.34.v20201102.jar: CVE-2020-27218
[ERROR] 
[ERROR] See the dependency-check report for more details.

Issue Links

• is a clone of: ZOOKEEPER-4017 Owasp check failing - Jetty 9.4.32 - CVE-2020-27216
• links to: GitHub Pull Request #1552
• links to: GitHub Pull Request #1553
• links to: GitHub Pull Request #1554