[AMBARI-25705] Bump spring to 5.3.22 to address the CVE

• Type: Story
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.7.7
• Epic Link: 2.7.7 Release roadmap
• Assignee: Wei-Chiu Chuang
• Reporter: Brahma Reddy Battula
• Created: 07/Jul/22 20:00
• Updated: 13/Oct/22 02:04
• Resolved: 13/Oct/22 02:04

Description

Bump spring to 5.3.20 to address the following CVE's

 

https://tanzu.vmware.com/security/cve-2022-22968

https://tanzu.vmware.com/security/cve-2022-22970

Issue Links

• breaks: AMBARI-25747 500 Server Error Occurrs When Access to /api/stomp/v1/xxx/xxxx/xhr_send
• Parent Feature: AMBARI-25703 Fix all possible CVE's on branch-2.7
• links to: GitHub PR#3336