From d8dced9058b1949609a14519523cbe47199f459e Mon Sep 17 00:00:00 2001
From: zrj <646384940@qq.com>
Date: Thu, 13 Jun 2024 16:26:03 +0800
Subject: [PATCH] 漏洞修复
---
blade-auth/src/main/resources/application-prod.yml | 2 +-
pom.xml | 27 ++++++++++++++++++++++++++-
2 files changed, 27 insertions(+), 2 deletions(-)
diff --git a/blade-auth/src/main/resources/application-prod.yml b/blade-auth/src/main/resources/application-prod.yml
index 716331a..8cdd06f 100644
--- a/blade-auth/src/main/resources/application-prod.yml
+++ b/blade-auth/src/main/resources/application-prod.yml
@@ -12,7 +12,7 @@
redis:
host: 127.0.0.1
port: 6379
- password:
+ password: b1W@xNTE3MDc
database: 3
ssl: false
diff --git a/pom.xml b/pom.xml
index ca41f41..c3b4049 100644
--- a/pom.xml
+++ b/pom.xml
@@ -16,7 +16,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
- <spring.boot.version>2.7.1</spring.boot.version>
+ <spring.boot.version>2.7.15</spring.boot.version>
<spring.cloud.version>2021.0.3</spring.cloud.version>
<spring.platform.version>Cairo-SR8</spring.platform.version>
@@ -85,6 +85,31 @@
<artifactId>lombok</artifactId>
<scope>provided</scope>
</dependency>
+ <!--漏洞覆盖之前 1.3.0 版本-->
+ <!-- https://mvnrepository.com/artifact/org.yaml/snakeyaml -->
+ <dependency>
+ <groupId>org.yaml</groupId>
+ <artifactId>snakeyaml</artifactId>
+ <version>2.0</version>
+ </dependency>
+ <!-- FileUpload 依赖 升级 （漏洞版本 1.3.3）-->
+ <dependency>
+ <groupId>commons-fileupload</groupId>
+ <artifactId>commons-fileupload</artifactId>
+ <version>1.5</version>
+ </dependency>
+ <!-- IO 依赖，FileUpload 需要 Commons IO 库 -->
+ <dependency>
+ <groupId>commons-io</groupId>
+ <artifactId>commons-io</artifactId>
+ <version>2.8.0</version>
+ </dependency>
+ <!--覆盖原来的 8.0.22 有漏洞-->
+ <dependency>
+ <groupId>mysql</groupId>
+ <artifactId>mysql-connector-java</artifactId>
+ <version>8.0.27</version>
+ </dependency>
</dependencies>
<build>
--
Gitblit v1.9.3