[ZOOKEEPER-4660] Suppress false positive OWASP failure for CVE-2021-37533

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.9.0, 3.8.1, 3.7.2
• Labels: pull-request-available
• Assignee: Enrico Olivelli
• Reporter: Enrico Olivelli
• Created: 19/Jan/23 10:53
• Updated: 30/Jan/23 07:57
• Resolved: 23/Jan/23 08:37

Description

OWAPS reports a failure against CVE-2021-37533 for apache commons-io-2.11.0.

The CVE is for commons-net, not used by ZooKeeper

Issue Links

• links to: GitHub Pull Request #1971