This is an automated email from the ASF dual-hosted git repository.
gerlowskija pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr-site.git
The following commit(s) were added to refs/heads/main by this push:
new e104a42cf Add CVE-2024-6763 to our vex file (#143)
e104a42cf is described below
commit e104a42cf431df0006ccca3a35d703047c41f4f8
Author: Jason Gerlowski <[email protected]>
AuthorDate: Wed Feb 26 07:11:48 2025 -0500
Add CVE-2024-6763 to our vex file (#143)
---
vex-input.json | 13 +++++++++++++
1 file changed, 13 insertions(+)
diff --git a/vex-input.json b/vex-input.json
index 6d5f5aa73..d0abfb59b 100644
--- a/vex-input.json
+++ b/vex-input.json
@@ -1,4 +1,17 @@
[
+ {
+ "ids": [
+ "CVE-2024-6763"
+ ],
+ "versions": "< 9.8",
+ "jars": [
+ "jetty-http-10.0.22.jar"
+ ],
+ "analysis": {
+ "state": "not_affected",
+ "detail": "Solr does not use the Jetty \"HttpURI\" utility class
necessary for the vulnerability."
+ }
+ },
{
"ids": [
"CVE-2022-33980"
