CCD-4975: (#716)

* CCD-4975: Fix CVE-5072, upgraded org.json:json to version 20240303 * CCD-4975: Fix CVE-5072, upgraded org.json:json to version 20240303 --------- Co-authored-by: shahirali <[email protected]>
hmcts · Jan 8, 2025 · 0a372a7 · 0a372a7
1 parent d13135b
commit 0a372a7
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 3 deletions.
diff --git a/build.gradle b/build.gradle
@@ -264,7 +264,7 @@ dependencies {
   implementation group: 'com.github.ben-manes.caffeine', name: 'caffeine', version: '2.7.0'
 
   implementation group: 'commons-beanutils', name: 'commons-beanutils', version: '1.9.4'
-  implementation group: 'org.json', name: 'json', version: '20200518'
+  implementation group: 'org.json', name: 'json', version: '20240303'
 
   implementation group: 'org.projectlombok', name: 'lombok', version: versions.lombok
   annotationProcessor group: 'org.projectlombok', name: 'lombok', version: versions.lombok

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -3,12 +3,10 @@
     <notes>Temporary Suppression
             CVE-2023-35116 refer [Ticket]
             CVE-2022-45688 refer [Ticket]
-            CVE-2023-5072 refer [Ticket]
             CVE-2023-6378 refer [Ticket]
     </notes>
     <cve>CVE-2023-35116</cve>
     <cve>CVE-2022-45688</cve>
-    <cve>CVE-2023-5072</cve>
     <cve>CVE-2023-6378</cve>
   </suppress>
 </suppressions>