[NIFI-13621] Upgrade JGit to 5.13.3.202401111512

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.28.0
• Component/s: NiFi Registry
• Assignee: Zsihovszki Krisztina
• Reporter: Zsihovszki Krisztina
• Created: 02/Aug/24 13:03
• Updated: 02/Aug/24 21:17
• Resolved: 02/Aug/24 21:17

Description

The support/nifi-1.x branch uses jgit version 5.13.2.202306221912-r which is vulnerable (CVE-2023-4759).

It is possible to use 5.13.3.202401111512-r version which does not contain the vulnerability.

https://mvnrepository.com/artifact/org.eclipse.jgit/org.eclipse.jgit

Issue Links

• links to: GitHub Pull Request #9141