Merge pull request #662 from hmcts/CCD-4737

CCD-4737 : Fix CVE-2023-28709 (Bumped version of Tomcat)

build.gradle

@@ -32,7 +32,7 @@ def versions = [
   springfoxSwagger   : '3.0.0',
   restAssured        : '4.3.1',
   cucumber           : '5.5.0',
-  tomcatEmbedded     : '9.0.73',
+  tomcatEmbedded     : '9.0.75',
   serviceAuthVersion : '3.1.4',
   pact_version       : '4.1.7',
 ]

config/owasp/suppressions.xml

@@ -1,34 +1,32 @@
 <?xml version="1.0" encoding="UTF-8"?><suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
 <suppress>
-<notes>Temporary Suppression
-    CVE-2022-45688 refer https://tools.hmcts.net/jira/browse/CCD-4373
-    CVE-2022-1471 refer https://tools.hmcts.net/jira/browse/CCD-4454
-    CVE-2023-28709 refer [Ticket]
-    CVE-2023-20883 refer [Ticket]
-    CVE-2023-35116 refer [Ticket]
-    CVE-2023-34036 refer [Ticket]
-
-        CVE-2023-34034 refer [Ticket]
-        CVE-2023-20873 refer [Ticket]
-        CVE-2023-41080 refer [Ticket]
-        CVE-2023-42794 refer [Ticket]
-        CVE-2023-42795 refer [Ticket]
-        CVE-2023-45648 refer [Ticket]
-        CVE-2023-44487 refer [Ticket]
-        CVE-2023-5072 refer [Ticket]</notes>
-<cve>CVE-2022-45688</cve>
-<cve>CVE-2022-1471</cve>
-<cve>CVE-2023-28709</cve>
-<cve>CVE-2023-20883</cve>
-<cve>CVE-2023-35116</cve>
-<cve>CVE-2023-34036</cve>
-<cve>CVE-2023-34034</cve>
-<cve>CVE-2023-20873</cve>
-<cve>CVE-2023-41080</cve>
-<cve>CVE-2023-42794</cve>
-<cve>CVE-2023-42795</cve>
-<cve>CVE-2023-45648</cve>
-<cve>CVE-2023-44487</cve>
-<cve>CVE-2023-5072</cve>
+  <notes>Temporary Suppression
+      CVE-2022-45688 refer https://tools.hmcts.net/jira/browse/CCD-4373
+      CVE-2022-1471 refer https://tools.hmcts.net/jira/browse/CCD-4454
+      CVE-2023-20883 refer [Ticket]
+      CVE-2023-35116 refer [Ticket]
+      CVE-2023-34036 refer [Ticket]
+      CVE-2023-34034 refer [Ticket]
+      CVE-2023-20873 refer [Ticket]
+      CVE-2023-41080 refer [Ticket]
+      CVE-2023-42794 refer [Ticket]
+      CVE-2023-42795 refer [Ticket]
+      CVE-2023-45648 refer [Ticket]
+      CVE-2023-44487 refer [Ticket]
+      CVE-2023-5072 refer [Ticket]
+  </notes>
+  <cve>CVE-2022-45688</cve>
+  <cve>CVE-2022-1471</cve>
+  <cve>CVE-2023-20883</cve>
+  <cve>CVE-2023-35116</cve>
+  <cve>CVE-2023-34036</cve>
+  <cve>CVE-2023-34034</cve>
+  <cve>CVE-2023-20873</cve>
+  <cve>CVE-2023-41080</cve>
+  <cve>CVE-2023-42794</cve>
+  <cve>CVE-2023-42795</cve>
+  <cve>CVE-2023-45648</cve>
+  <cve>CVE-2023-44487</cve>
+  <cve>CVE-2023-5072</cve>
 </suppress>
-</suppressions>
+</suppressions>