[MYFACES-4020] Update commons-collections to 3.2.2

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.8
• Fix Version/s: 2.2.10
• Assignee: Dennis Kieselhorst
• Reporter: Dennis Kieselhorst
• Created: 25/Nov/15 10:40
• Updated: 19/Mar/16 04:08
• Resolved: 25/Nov/15 10:43

Description

2015-11-23 16:37 GMT-05:00 Mike Kienenberger:

let's upgrade our commons-collections
dependency to 3.2.2 as certain JSF configurations likely present
attack vectors.

https://issues.apache.org/jira/browse/COLLECTIONS-580

Issue Links

• relates to: COLLECTIONS-580 Arbitrary remote code execution with InvokerTransformer