Fixed: [CVE-2023-34478] Apache Shiro, before 1.12.0, is susceptible t…

…o a path traversal attack (OFBIZ-12839) See https://lists.apache.org/thread/jowcs5nd4tz5fxwl1mqkqnvyrwwx59qo for details
apache · Jul 22, 2023 · a6d0c36 · a6d0c36
1 parent 416f03f
commit a6d0c36
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/build.gradle b/build.gradle
@@ -205,7 +205,7 @@ dependencies {
     compile 'org.apache.logging.log4j:log4j-web:2.17.2' //???
     compile 'org.apache.poi:poi:3.17'
     compile 'org.apache.pdfbox:pdfbox:2.0.24'
-    compile 'org.apache.shiro:shiro-core:1.4.0'
+    compile 'org.apache.shiro:shiro-core:1.12.0'
     compile 'org.apache.sshd:sshd-core:1.7.0'
     compile 'org.apache.tika:tika-core:1.28.4'
     compile 'org.apache.tika:tika-parsers:1.28.4'