Vulnerabilities in jars used by jmeter 5.6.3
Priyansh Gupta <[email protected]> Sat, 14 Sep 2024 21:16:01 +0530
| Newsgroups | gmane.comp.jakarta.jmeter.user |
|---|---|
| Message-ID | <CAJiLSps-7Ejydq=_CVdEYSJ8Y1jUX5v9zGK6Q7jY69T2MxnK7w@mail.gmail.com> |
I have been trying to run jmeter in a container, but image vulnerability scanning tools suggest that jmeter is using some jars which have some vulnerabilities. Basically it is using the nettify version which is older than 4.1.44. You can find more details about vulnerability here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20444 . So I was wondering if I can build a jmeter binary from source and make some changes somewhere so that it uses the latest nettify version. Any help and support regarding this problem will be really appreciated. Thanks.