[ZOOKEEPER-4599] Upgrade Jetty to avoid CVE-2022-2048

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.6.3, 3.8.0, 3.7.1
• Fix Version/s: 3.9.0, 3.7.2, 3.8.2
• Labels: security
• Assignee: Mate Szalay-Beko
• Reporter: Shivakumar
• Created: 25/Jul/22 06:09
• Updated: 04/Aug/23 11:28
• Resolved: 10/May/23 09:43

Description

CVE ID	Type	Severity	Packages	Package Version	CVSS	Fix Status
CVE-2022-2048	java	high	org.eclipse.jetty_jetty-io	9.4.43.v20210629	7.5	fixed in 11.0.9, 10.0.9, 9.4.47

Our security scan detected the above vulnerabilities

upgrade to correct versions for fixing vulnerabilities

Issue Links

• is a clone of: ZOOKEEPER-4439 Upgrade zk vulnerabilities
• relates to: ZOOKEEPER-4532 CVE-2022-2296-Upgrade jetty to 9.4.46.v20220331