hostsharing/hs.hsadmin.ng
1
0
Fork 0
Code Activity

dependency-versions-upgrade and exclusion (#144)

Browse Source 
Co-authored-by: Michael Hoennig <michael@hoennig.de>
Reviewed-on: https://dev.hostsharing.net/hostsharing/hs.hsadmin.ng/pulls/144
Reviewed-by: Marc Sandlus <marc.sandlus@hostsharing.net>
This commit is contained in:
Michael Hoennig
2025-01-09 09:28:30 +01:00
parent 6b09ad0003
commit a7ffee9348
7 changed files with 32 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
etc/owasp-dependency-check-suppression.xml
View File

@ -9,8 +9,12 @@
</suppress>
<suppress>
<notes><![CDATA[
Malicious HTTP redirect in JAXB on a REST-endpoint is not that dangerous.
file name: logback-core-1.5.12.jar
A successful attack requires the user to have write access to a configuration file or environment vars.
]]></notes>
<cve>CVE-2024-9329</cve>
<packageUrl regex="true">^pkg:maven/ch\.qos\.logback/logback-core@.*$</packageUrl>
<cpe>cpe:/a:qos:logback</cpe>
<cve>CVE-2024-12798</cve>
</suppress>
</suppressions>