[TOMEE-4225] Remove commons-net from TomEE distribution

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 9.0.0, 9.1.0
• Fix Version/s: 10.0.0-M1, 9.1.1
• Component/s: TomEE Core Server
• Assignee: Richard Zowalla
• Reporter: RAJU THANNEERU
• Created: 16/Jun/23 11:41
• Updated: 16/Jun/23 12:39
• Resolved: 16/Jun/23 12:39

Description

Vulnerability on Apache commons net version 3.8.0 which is used in TomEE 9.0.0 and 9.1.0

https://nvd.nist.gov/vuln/detail/CVE-2021-37533

https://mvnrepository.com/artifact/commons-net/commons-net/3.8.0

Apache Commons Net 3.9.0 does not have this vulnerability.

https://mvnrepository.com/artifact/commons-net/commons-net/3.9.0