[ATLAS-4915] Upgrade Spring Security to 5.7.13/5.8.15/6.2.7/6.3.4+ due to CVE-2024-38821

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.0.0, 2.4.0
• Component/s: atlas-core
• Assignee: Disha Talreja
• Reporter: Disha Talreja
• Created: 06/Nov/24 20:07
• Updated: 07/Nov/24 23:35
• Resolved: 07/Nov/24 23:35

Description

Upgrade Spring Security to 5.7.13/5.8.15/6.2.7/6.3.4+ due to CVE-2024-38821

Affected versions of this package are vulnerable to Missing Authorization allowing Spring Security authorization rules to be bypassed for static resources.

https://nvd.nist.gov/vuln/detail/CVE-2024-38821 

https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKSECURITY-8309135