fix crash related to hotfix CVE-2024-38819

FraunhoferIOSB · Oct 30, 2024 · eab2ad4 · eab2ad4
1 parent 6640850
commit eab2ad4
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 12 deletions.
diff --git a/core/pom.xml b/core/pom.xml
@@ -25,12 +25,6 @@
             <artifactId>spring-web</artifactId>
             <version>${spring.web.version}</version>
         </dependency>
-        <!-- Fixes CVE-2024-38819. Can be removed once org.springframework.boot:spring-boot-starter-web >= 3.3.5 is used -->
-        <dependency>
-            <groupId>org.springframework</groupId>
-            <artifactId>spring-webmvc</artifactId>
-            <version>${spring.web.version}</version>
-        </dependency>
         <dependency>
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter</artifactId>
@@ -51,11 +45,6 @@
                     <groupId>org.yaml</groupId>
                     <artifactId>snakeyaml</artifactId>
                 </exclusion>
-                <!-- Fixes CVE-2024-38819. Can be removed once org.springframework.boot:spring-boot-starter-web >= 3.3.5 is used -->
-                <exclusion>
-                    <groupId>org.springframework</groupId>
-                    <artifactId>spring-webmvc</artifactId>
-                </exclusion>
             </exclusions>
         </dependency>
         <dependency>

diff --git a/pom.xml b/pom.xml
@@ -101,7 +101,7 @@
         <sonar.java.coveragePlugin>jacoco</sonar.java.coveragePlugin>
         <sonar.language>java</sonar.language>
         <sonar.organization>fraunhofer-iosb</sonar.organization>
-        <spring.boot.version>3.3.4</spring.boot.version>
+        <spring.boot.version>3.3.5</spring.boot.version>
         <spring.web.version>6.1.14</spring.web.version>
     </properties>
     <dependencies>