ICEfaces
  1. ICEfaces
  2. ICE-11550

Address the vulnerability CVE-2023-24998

          Details

          • Type: Task Task
          • Status: Resolved
          • Priority: Major Major
          • Resolution: Fixed
          • Affects Version/s: EE-4.3.0.GA_P04, EE-3.3.0.GA_P10
          • Fix Version/s: EE-4.3.0.GA_P05, EE-3.3.0.GA_P11
          • Component/s: ACE-Components
          • Labels:
            None
          • Environment:
            Any
          • Support Case References:
            Support Case 14724

            Description

            A new vulnerability in Apache Commons FileUpload (CVE-2023-24998) was brought to our attention by a supported customer. We don't use the Apache Commons FileUpload library in a regular way, but rather we integrated its source code into our own in 2010, as per ICE-5912, with some necessary adjustments to support our ace:fileEntry component. This JIRA is for investigating how this vulnerability could affect our ace:fileEntry component and for making necessary changes to mitigate this vulnerability.

              Activity

              Ascending order - Click to sort in descending order
              Arturo Zambrano created issue -
              Arturo Zambrano made changes -
              Field Original Value New Value
              Assignee Arturo Zambrano [ artzambrano ]
              Arturo Zambrano made changes -
              Fix Version/s EE-4.3.0.GA_P05 [ 14073 ]
              Fix Version/s EE-3.3.0.GA_P11 [ 14074 ]
              Arturo Zambrano made changes -
              Support Case References Support Case 14724
              Arturo Zambrano made changes -
              Status Open [ 1 ] Resolved [ 5 ]
              Resolution Fixed [ 1 ]

                People

                • Assignee:
                  Arturo Zambrano
                  Reporter:
                  Arturo Zambrano
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  1 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: