From: prakash.e <prakash.e@huawei.com>
Date: Wed, 26 Feb 2020 06:02:52 +0000 (+0530)
Subject: Resmanagement commons-beanutils vulnerability fix
X-Git-Tag: 1.3.1~5
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=40ec440aafd63c83e71f1596128831598f912692;p=vfc%2Fnfvo%2Fresmanagement.git

Resmanagement commons-beanutils vulnerability fix

Excluded common-beanutil from its parent jar
and included explicitly

Change-Id: I752ab71686e7b6527d9ded5d8eeb223049c083e0
Issue-ID: VFC-1598
Signed-off-by: Prakash.E <prakash.e@huawei.com>
---

diff --git a/ResmanagementService/service/pom.xml b/ResmanagementService/service/pom.xml
index 077ff61..0337897 100644
--- a/ResmanagementService/service/pom.xml
+++ b/ResmanagementService/service/pom.xml
@@ -87,8 +87,17 @@
                     <groupId>commons-collections</groupId>
                     <artifactId>commons-collections</artifactId>
                 </exclusion>
+                <exclusion>
+                    <groupId>commons-beanutils</groupId>
+                    <artifactId>commons-beanutils</artifactId>
+                </exclusion>
             </exclusions>
         </dependency>
+        <dependency>
+            <groupId>commons-beanutils</groupId>
+            <artifactId>commons-beanutils</artifactId>
+            <version>1.9.4</version>
+        </dependency>
         <dependency>
             <groupId>org.eclipse.jetty.orbit</groupId>
             <artifactId>javax.servlet</artifactId>