[FP]: Undertow-core CVE-2022-2053 reported after fix in 2.2.19.Final

[gthazmatt]

Package URl

pkg:maven/io.undertow/[email protected]

CPE

cpe:2.3:a:io.undertow:undertow-core:2.2.19.Final:*:*:*:*:*:*:*

CVE

CVE-2022-2053

ODC Integration

{"label"=>"Maven Plugin"}

ODC Version

7.1.1

Description

From the report: "This flaw was fixed in Undertow 2.2.19.Final, Undertow 2.3.0.Alpha2."

[github-actions[bot]]

Maven Coordinates

<dependency>
   <groupId>io.undertow</groupId>
   <artifactId>undertow-core</artifactId>
   <version>2.2.19.Final</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #4758
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/io\.undertow/undertow-core@.*$</packageUrl>
   <cpe>cpe:/a:io.undertow:undertow-core</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/2876753176

[github-actions[bot]]

Maven Coordinates

<dependency>
   <groupId>io.undertow</groupId>
   <artifactId>undertow-core</artifactId>
   <version>2.2.19.Final</version>
</dependency>

Suppression rule:

<suppress base="true">
   <notes><![CDATA[
   FP per issue #4758
   ]]></notes>
   <packageUrl regex="true">^pkg:maven/io\.undertow/undertow-core@.*$</packageUrl>
   <cpe>cpe:/a:io.undertow:undertow-core</cpe>
</suppress>

Link to test results: https://github.com/jeremylong/DependencyCheck/actions/runs/2884784727

[aikebah]

Reported upstream as https://github.com/OSSIndex/vulns/issues/321

[aikebah]

This has been resolved by an update to the upstream vulnerability source