Uploaded image for project: 'ActiveMQ Artemis'
  1. ActiveMQ Artemis
  2. ARTEMIS-3347

update commons-io

    XMLWordPrintableJSON

Details

    • Dependency upgrade
    • Status: Closed
    • Major
    • Resolution: Fixed
    • None
    • 2.18.0
    • Broker, Tests, Web Console
    • None

    Description

      The codebase uses various versions of commons-io which are susceptible to a path traversal CVE https://nvd.nist.gov/vuln/detail/CVE-2021-29425, which affects < 2.7.0

       

      Attachments

        Issue Links

          incorporates

          Dependency upgrade - Upgrading a dependency to a newer version ARTEMIS-3348 update hawtio

          • Major - Major loss of function.
          • Closed
          links to

          Web Link GitHub Pull Request #3625

          Activity

            People

              Unassigned Unassigned
              robbie Robbie Gemmell
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 20m
                  20m