Uploaded image for project: 'Build'
  1. Build
  2. BUILD-704

Investigate CVE-2022-24613 and CVE-2022-24614

XMLWordPrintable

      As reported by CVE scan in Magnolia's continuous integration builds

      magnolia-community-webapp-6.2-SNAPSHOT.war: metadata-extractor-2.15.0.1.jar (pkg:maven/org.tallison/metadata-extractor@2.15.0.1, cpe:2.3:a:metadata-extractor_project:metadata-extractor:2.15.0.1:*:*:*:*:*:*:*) : CVE-2022-24613, CVE-2022-24614
      magnolia-empty-webapp-6.2-SNAPSHOT.war: metadata-extractor-2.15.0.1.jar (pkg:maven/org.tallison/metadata-extractor@2.15.0.1, cpe:2.3:a:metadata-extractor_project:metadata-extractor:2.15.0.1:*:*:*:*:*:*:*) : CVE-2022-24613, CVE-2022-24614
      

        Acceptance criteria

              mmichel Maxime Michel
              fgrilli Federico Grilli
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Task DoR