Details
-
Work Item
-
Status: Done
-
Major
-
Resolution: Fixed
-
None
-
None
-
All
-
DQ21 CN 10
-
GreenHopper Ranking:0|i29nar:
-
9223372036854775807
-
Small
Description
Out of SLA: 2021-11-22
CVE: CVE-2021-39154
https://sca.analysiscenter.veracode.com/workspaces/X33hjMQ/issues/vulnerabilities/86189426
Target version: 1.4.18
Severty: HIGH
===============
already update XStream to 1.4.18 on dq libs see TDQ-19719
but still, need to update to 1.4.18 in the studio(the version of the xstream.jar which is under org.drools.eclipse is 1.4.17)
these codes have been commented already, so just remove them