Fix vulnerability issue in multivimproxy

Excluded common-beanutil from its parent jar
and included explicitly

Change-Id: I2712f8f99aa03936096cab3f26baa905378c2d93
Issue-ID: VFC-1598
Signed-off-by: sonibhanu <bhanu.soni@huawei.com>

diff --git a/service/pom.xml b/service/pom.xml
index 260caf6..974f6ac 100644 (file)
--- a/service/pom.xml
+++ b/service/pom.xml
@@ -84,8 +84,17 @@
                     <groupId>commons-collections</groupId>\r
                     <artifactId>commons-collections</artifactId>\r
                 </exclusion>\r
+                <exclusion>\r
+                    <groupId>commons-beanutils</groupId>\r
+                    <artifactId>commons-beanutils</artifactId>\r
+                </exclusion>\r
             </exclusions>\r
         </dependency>\r
+        <dependency>\r
+            <groupId>commons-beanutils</groupId>\r
+            <artifactId>commons-beanutils</artifactId>\r
+            <version>1.9.4</version>\r
+        </dependency>\r
         <!--  dependency>\r
             <groupId>org.eclipse.jetty.orbit</groupId>\r
             <artifactId>javax.servlet</artifactId>\r