This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • pom.xml

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Upgrade	Breaking Change	Exploit Maturity	Reachability
	535/1000 Why? Mature exploit, Has a fix available, CVSS 5.3	Directory Traversal SNYK-JAVA-COMMONSIO-1277109	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	Mature	No Path Found
	490/1000 Why? Has a fix available, CVSS 6.8	Information Exposure SNYK-JAVA-ORGAPACHEMINA-174326	org.apache.directory.server:apacheds-protocol-shared: 1.5.7 -> 2.0.0.AM26	No	No Known Exploit	No Path Found
	568/1000 Why? Has a fix available, CVSS 8.2	SQL Injection SNYK-JAVA-ORGHIBERNATE-1041788	org.hibernate:hibernate-core: 3.6.10.Final -> 5.4.24.Final org.hibernate:hibernate-entitymanager: 3.6.10.Final -> 5.4.24.Final	Yes	No Known Exploit	No Path Found
	555/1000 Why? Has a fix available, CVSS 8.1	SQL Injection SNYK-JAVA-ORGHIBERNATE-584563	org.hibernate:hibernate-core: 3.6.10.Final -> 5.4.24.Final org.hibernate:hibernate-entitymanager: 3.6.10.Final -> 5.4.24.Final	Yes	No Known Exploit	No Path Found
	600/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	XML External Entity (XXE) Injection SNYK-JAVA-ORGJDOM-1309669	org.jdom:jdom2: 2.0.6 -> 2.0.6.1	No	Proof of Concept	No Path Found
	420/1000 Why? Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JAVA-ORGOWASPANTISAMY-1320080	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	No Known Exploit	No Path Found
	420/1000 Why? Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JAVA-ORGOWASPANTISAMY-2774681	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	No Known Exploit	No Path Found
	420/1000 Why? Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JAVA-ORGOWASPANTISAMY-2774682	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	No Known Exploit	No Path Found
	525/1000 Why? Has a fix available, CVSS 7.5	Directory Traversal SNYK-JAVA-ORGOWASPESAPI-2803305	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	No Known Exploit	No Path Found
	455/1000 Why? Has a fix available, CVSS 6.1	Cross-site Scripting (XSS) SNYK-JAVA-ORGOWASPESAPI-2805301	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	No Known Exploit	No Path Found
	365/1000 Why? Has a fix available, CVSS 4.3	Improper Output Neutralization for Logs SNYK-JAVA-ORGSPRINGFRAMEWORK-2329097	org.springframework:spring-context: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-jdbc: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-tx: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-web: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-webmvc: 4.3.30.RELEASE -> 5.2.22.RELEASE	Yes	No Known Exploit	No Path Found
	365/1000 Why? Has a fix available, CVSS 4.3	Improper Input Validation SNYK-JAVA-ORGSPRINGFRAMEWORK-2330878	org.springframework:spring-context: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-jdbc: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-tx: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-web: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-webmvc: 4.3.30.RELEASE -> 5.2.22.RELEASE	Yes	No Known Exploit	No Path Found
	415/1000 Why? Has a fix available, CVSS 5.3	Denial of Service (DoS) SNYK-JAVA-ORGSPRINGFRAMEWORK-2434828	org.springframework:spring-context: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-webmvc: 4.3.30.RELEASE -> 5.2.22.RELEASE	Yes	No Known Exploit	No Path Found
	790/1000 Why? Mature exploit, Has a fix available, CVSS 9.8	Remote Code Execution SNYK-JAVA-ORGSPRINGFRAMEWORK-2436751	org.springframework:spring-context: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-jdbc: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-tx: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-web: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-webmvc: 4.3.30.RELEASE -> 5.2.22.RELEASE	Yes	Mature	No Path Found
	410/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Improper Handling of Case Sensitivity SNYK-JAVA-ORGSPRINGFRAMEWORK-2689634	org.springframework:spring-context: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-web: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-webmvc: 4.3.30.RELEASE -> 5.2.22.RELEASE	Yes	Proof of Concept	No Path Found
	415/1000 Why? Has a fix available, CVSS 5.3	Denial of Service (DoS) SNYK-JAVA-ORGSPRINGFRAMEWORK-2823313	org.springframework:spring-context: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-jdbc: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-tx: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-web: 4.3.30.RELEASE -> 5.2.22.RELEASE org.springframework:spring-webmvc: 4.3.30.RELEASE -> 5.2.22.RELEASE	Yes	No Known Exploit	No Path Found
	525/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JAVA-XERCES-2359991	org.owasp.esapi:esapi: 2.2.3.1 -> 2.4.0.0	No	No Known Exploit	No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)
🦉 Denial of Service (DoS)
🦉 Remote Code Execution
🦉 More lessons are available in Snyk Learn