You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kylin.apache.org by "kangkaisen (JIRA)" <ji...@apache.org> on 2016/07/14 09:56:20 UTC
[jira] [Created] (KYLIN-1893) Upgrade spring-boot framework because
of security vulnerabilities
kangkaisen created KYLIN-1893:
---------------------------------
Summary: Upgrade spring-boot framework because of security vulnerabilities
Key: KYLIN-1893
URL: https://issues.apache.org/jira/browse/KYLIN-1893
Project: Kylin
Issue Type: Bug
Components: REST Service
Affects Versions: v1.5.2
Reporter: kangkaisen
Assignee: Zhong,Jason
Priority: Critical
The Spring Boot Framework has a expression of SPEL type injection common vulnerabilities, which affect versions is 1.1-1.3.0.
we need upgrade to version 1.3.1 or later.
https://www.chinacybersafety.com/tag/the-common-vulnerabilities-and-high-risk-vulnerabilities-early-warning-framework-spring-boot
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)