[🍒][PLUGIN-1914][PLUGIN-1907] Fix Vulnerability for httpClient and logback-classic

[sgarg-CS]

[🍒]

🍒 [cherrypick]

Commit:

• a169e4f
• ab41eb5

PR:

• Fix: Vulnerability for httpClient #112 [Reviewer: @MrRahulSharma ]
• Fix: Vulnerability for logback-classic #116 [Reviewers: @minurajeeve @MrRahulSharma ]

JIRA:

• PLUGIN-1914
• PLUGIN-1907

Description:

1. PLUGIN-1914
   This issue is fixed in the PR by upgrading the version of org.apache.httpcomponents:httpclient library from 4.3.4 to to a secure version 4.5.13 thereby fixing the following vulnerabilities present in the older version.

   • GHSA-7r82-7xv7-xcpj (incorrect host resolution due to malformed URIs),
   • GHSA-cfh5-3ghh-wfjx (improper SSL hostname verification allowing MITM attacks), and
   • GHSA-fmj5-wv96-r2ch (socket timeout not applied during SSL handshake, causing potential DoS).

2. PLUGIN-1907
   This issue is fixed in the PR by upgrading the ch.qos.logback:logback-classic library from 1.2.8 to a secure version 1.3.15 thereby fixing the following CVE: GHSA-vmq6-5m68-f53m)

[MrRahulSharma]

LGTM