Meituan-Dianping/Zebra

There is a vulnerability in commons-httpclient 3.1 ,upgrade recommended

QiAnXinCodeSafe opened this issue · 0 comments

QiAnXinCodeSafe commented

Zebra/zebra-admin-web/pom.xml

Lines 155 to 157 in 33d74b8

<groupId>commons-httpclient</groupId>
<artifactId>commons-httpclient</artifactId>
<version>3.1</version>

CVE-2012-5783 CVE-2020-13956

Recommended upgrade version：4.5.13