Merge pull request #702 from hmcts/revert-701-CCD-5159

Revert "CCD-5159:"
hmcts · Aug 29, 2024 · 92f432a · 92f432a
2 parents d85cf81 + f1d273b
commit 92f432a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -308,8 +308,8 @@ dependencies {
   implementation "org.apache.tomcat.embed:tomcat-embed-websocket:${versions.tomcatEmbedded}"
 
   //CVE-2021-42500
-  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.13'
-  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.2.13'
+  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.2.10'
+  implementation group: 'ch.qos.logback', name: 'logback-core', version: '1.2.10'
 
   // CVE-2021-28170
   implementation group: 'org.glassfish', name: 'jakarta.el', version: '4.0.1'

diff --git a/config/owasp/suppressions.xml b/config/owasp/suppressions.xml
@@ -6,13 +6,15 @@
             CVE-2022-45688 refer [Ticket]
             CVE-2023-5072 refer [Ticket]
             CVE-2023-1370 refer [Ticket]
+            CVE-2023-6378 refer [Ticket]
             CVE-2023-34055 refer [Ticket]
             CVE-2023-20873 refer [Ticket]
             CVE-2023-46589 refer [Ticket]</notes>
     <cve>CVE-2023-35116</cve>
     <cve>CVE-2022-45688</cve>
     <cve>CVE-2023-5072</cve>
     <cve>CVE-2023-1370</cve>
+    <cve>CVE-2023-6378</cve>
     <cve>CVE-2023-34055</cve>
     <cve>CVE-2023-20873</cve>
     <cve>CVE-2023-46589</cve>