CVE-2023-44487 @ Maven-org.eclipse.jetty.http2:http2-common-9.4.12.RC0

[cxronen]

Checkmarx (SCA): Vulnerable Package
Vulnerability: Read More about CVE-2023-44487
Checkmarx Project: cxronen/BookStore_VSCode
Repository URL: https://github.com/cxronen/BookStore_VSCode
Branch: master
Scan ID: 3aaa12b3-552a-4874-ba98-3d364d7d56f6

---

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 9.4.53.v20231009-redhat-00002