On Mar 17, 2015, at 2:20 PM, Jacques Le Roux <[email protected]> 
wrote:

> BTW, what about the jetty component?
> 
> I just found that it uses 
> org.apache.taglibs.standard.glassfish-1.2.0.v201112081803.jar and all version 
> under 1.2.3 are 
> vulnerablehttps://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0254
> 
> Jacques
> 

This is probably worth of a new thread.

Jacopo

Reply via email to