Details
-
Bug
-
Resolution: Fixed
-
Major
-
None
-
None
-
All
-
Small
Description
Fix of https://nvd.nist.gov/vuln/detail/CVE-2020-1938 broke talend-compoment:web goal as ApplicationContext misses some attributes as javax.websocket.server.ServerContainer and other (3 missing).
The problem is coming from these changes https://github.com/apache/tomcat/compare/9.0.30...9.0.31#diff-492fcf860eb3858f64d4424fe811f439
The service class loader used is now set to context.getParentClassLoader() which in cas of the web mojo has almost no classes.