Uploaded image for project: 'Shiro'
  1. Shiro
  2. SHIRO-576

Commons-beanutils dependency is not security compliant

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 1.3.0
    • 1.3.3, 1.4.0-RC2
    • None
    • None

    Description

      Commons-beanutils v 1.8.0 dependency is not security compliant. Has issue CVE-2014-0114.

      Note that current version commons-beanutils 1.9.2 in turn has a CVE in its dependency commons-collections (CVE-2015-6420, see BEANUTILS-488), which is fixed in 1.9.3.

      In addition, consider including the OWASP Dependency Check to the build to find out about CVEs in dependencies faster.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. SHIRO-612 Need to upgrade BeanUtils to avoid vulnerability

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #39

          Activity

            People

              Unassigned Unassigned
              schnatterer schnatterer
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: