[DOXIA-615] Upgrade HttpClient to 4.5.13

• Type: Dependency upgrade
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.6, 1.9.1
• Fix Version/s: 1.10
• Component/s: Core
• Assignee: Elliotte Rusty Harold
• Reporter: Philipp Ottlinger
• Created: 11/Oct/20 07:53
• Updated: 21/Jun/21 18:49
• Resolved: 30/May/21 20:39

Description

https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEHTTPCOMPONENTS-1016906

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956

Over at RAT we do use doxia-core and just got a security report (RAT-275) that doxia uses a problematic version of httpclient.

Can you update to a more recent version and provide a new release?

Thanks

Issue Links

• blocks: RAT-275 Update httpclient to fix CVE-2020-13956 once a new doxia-core release is available