Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-06 15:17:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Supresses false positives which will be removed once Velocity will be upgraded

Browse Source
This commit is contained in:
Lukasz Lenart
2019-11-19 09:27:21 +01:00
parent 8485b26d2c
commit 2211faba64
1 changed files with 114 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/etc/project-suppression.xml
+114 -6
View File
@@ -19,15 +19,93 @@
-->
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
<suppress>
<notes><![CDATA[
This suppresses false positives identified on Struts Annotations.
]]></notes>
<gav regex="true">org\.apache\.struts:struts\-annotations\:1\.0\.6.*$</gav>
<cpe>cpe:/a:apache:struts:1.0.6</cpe>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<cpe>cpe:/a:apache:struts</cpe>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<gav regex="true">^org\.apache\.struts:struts\-core\:1\.3\.8.*$</gav>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2011-5057</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2012-0391</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2012-0392</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2012-0393</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2012-0394</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2012-0838</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2013-1965</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2013-1966</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2013-2115</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2013-2134</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2013-2135</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2014-0094</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2014-0113</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2015-5169</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2016-0785</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-core-1.3.8.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-core@.*$</packageUrl>
<vulnerabilityName>CVE-2016-4003</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: struts-annotations-1.0.6.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.apache\.struts/struts\-annotations@.*$</packageUrl>
<cpe>cpe:/a:apache:struts</cpe>
</suppress>
<suppress>
@@ -40,4 +118,34 @@
<gav regex="true">^org\.apache\.struts:struts\-taglib\:1\.3\.8.*$</gav>
<cpe>cpe:/a:apache:struts</cpe>
</suppress>
<suppress>
<notes><![CDATA[file name: dom4j-1.1.jar]]></notes>
<packageUrl regex="true">^pkg:maven/dom4j/dom4j@.*$</packageUrl>
<vulnerabilityName>CVE-2018-1000632</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: bsh-2.0b4.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.beanshell/bsh@.*$</packageUrl>
<vulnerabilityName>CVE-2016-2510</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[ file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<cpe>cpe:/a:plexus-utils_project:plexus-utils</cpe>
</suppress>
<suppress>
<notes><![CDATA[file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<vulnerabilityName>CVE-2017-1000487</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<vulnerabilityName>Directory traversal in org.codehaus.plexus.util.Expand</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<vulnerabilityName>Possible XML Injection</vulnerabilityName>
</suppress>
</suppressions>