老师,我的依赖包出了很多问题,但都是依赖项脆弱,易受到攻击。请问有解决方案吗?
来源:3-4 service及mybatis接入(下)
Ari_wuhan
2023-02-27
一种是: Provides transitive vulnerable dependency maven:org.springframework:spring-web:5.1.8.RELEASE CVE-2016-1000027 9.8 Deserialization of Untrusted Data vulnerability with high severity found CVE-2020-5421 6.5 Improper Input Validation vulnerability pending CVSS allocation CVE-2020-5397 5.3 Cross-Site Request Forgery (CSRF) vulnerability pending CVSS allocation CVE-2021-22118 7.8 Improper Privilege Management vulnerability pending CVSS allocation CVE-2020-5398 7.5 Download of Code Without Integrity Check vulnerability pending CVSS allocation Results powered by Checkmarx©
一种是: Dependency maven:mysql:mysql-connector-java:5.1.41 is vulnerable CVE-2020-2934 5.0 Uncontrolled Resource Consumption vulnerability pending CVSS allocation CVE-2017-3589 3.3 Improper Access Control vulnerability pending CVSS allocation CVE-2019-2692 6.3 Improper Input Validation vulnerability pending CVSS allocation CVE-2020-2875 4.7 Improper Access Control vulnerability pending CVSS allocation CVE-2018-3258 8.8 Improper Input Validation vulnerability pending CVSS allocation CVE-2020-2933 2.2 Uncontrolled Resource Consumption vulnerability pending CVSS allocation CVE-2017-3586 6.4 Improper Access Control vulnerability pending CVSS allocation Cx6f651376-312a 7.5 Missing Release of Memory after Effective Lifetime vulnerability pending CVSS allocation CVE-2021-2471 5.9 Improper Restriction of XML External Entity Reference vulnerability with medium severity found CVE-2022-21363 6.6 Improper Input Validation vulnerability pending CVSS allocation Results powered by Checkmarx©
我在网上搜了几天,没有找到有效的解决方法,麻烦老师看看。
1回答
-
检查下和课程里的内容版本需要保持一致
0132023-03-07
相似问题