Apache/struts
1
0
Fork 0
mirror of https://github.com/apache/struts.git synced 2026-08-05 22:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #858 from apache/fix/plexus-exclusion

Browse Source 
Fixes excluding Plexus container in OWASP scan
This commit is contained in:
Lukasz Lenart
2024-01-22 10:09:58 +01:00
committed by GitHub
parent ec18f0eef1 cf74a4450c
commit 65c0427eae
1 changed files with 8 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/etc/project-suppression.xml
+8 -13
View File
@@ -132,21 +132,16 @@
<notes><![CDATA[ file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<cpe>cpe:/a:plexus-utils_project:plexus-utils</cpe>
<cve>CVE-2022-4244</cve>
<cve>CVE-2022-4245</cve>
<cve>CVE-2017-1000487</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<vulnerabilityName>CVE-2017-1000487</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<vulnerabilityName>Directory traversal in org.codehaus.plexus.util.Expand</vulnerabilityName>
</suppress>
<suppress>
<notes><![CDATA[file name: plexus-utils-1.2.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
<vulnerabilityName>Possible XML Injection</vulnerabilityName>
<notes><![CDATA[ file name: plexus-container-default-1.0-alpha-10.jar]]></notes>
<packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus\/plexus\-container\-default@.*$</packageUrl>
<cpe>cpe:/a:plexus-utils_project:plexus-utils</cpe>
<cve>CVE-2022-4244</cve>
<cve>CVE-2022-4245</cve>
</suppress>
<suppress>
<notes><![CDATA[file name: oval-1.90.jar]]></notes>