[TOMEE-2886] Update quartz-scheduler to mitigate CVE-2019-13990

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Auto Closed
• Affects Version/s: 7.1.3
• Component/s: TomEE Build
• Assignee: Jonathan Gallimore
• Reporter: Leandro Vale
• Created: 20/Jul/20 18:38
• Updated: 17/May/23 19:28
• Resolved: 17/May/23 19:28

Description

Release 7.1.3 contains quartz 2.2.4 which is affected by CVE-2019-13990.

This has been fixed in quartz 2.3.2 (https://github.com/quartz-scheduler/quartz/issues/467).