[TOMEE-4125] Update Apache CXF versions to mitigate CVE-2022-46364 and CVE-2022-46363

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 9.0.0.RC1, 8.0.13
• Fix Version/s: 8.0.14, 9.0.0
• Component/s: TomEE Core Server
• Labels: cve
• Assignee: Unassigned
• Reporter: RAJU THANNEERU
• Created: 15/Dec/22 04:08
• Updated: 19/Dec/22 09:14
• Resolved: 19/Dec/22 09:14

Description

Update Apache CXF versions to mitigate CVE-2022-46364 and CVE-2022-46363 

https://nvd.nist.gov/vuln/detail/CVE-2022-46364

https://nvd.nist.gov/vuln/detail/CVE-2022-46363

 

Issue Links

• relates to: TOMEE-4126 CXF 3.4.10
• relates to: TOMEE-4127 CXF 3.5.5