CCD-5953 : Fix CVE-2023-52428 (#160)

* bumped spring security

* add nimbus-jose-jwt 9.37.2

* reverted bump to nimbus

Author: dinesh1patel

build.gradle

@@ -177,6 +177,8 @@ ext['snakeyaml.version'] = '2.0'
 ext['spring-security.version'] = '5.8.10'
 
 dependencies {
+  //implementation group: 'com.nimbusds', name: 'nimbus-jose-jwt', version: '9.37.2' //Fix for CVE-2023-52428
+
   implementation("org.springframework.cloud:spring-cloud-starter-bootstrap")
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-actuator'
   implementation group: 'org.springframework.boot', name: 'spring-boot-starter-aop'

config/owasp/suppressions.xml

@@ -7,13 +7,11 @@
         CVE-2023-6481 refer [Ticket]
         CVE-2023-6481 refer [Ticket]
 
-        CVE-2023-52428 refer [Ticket]
         CVE-2024-38820 refer [Ticket]</notes>
     <cve>CVE-2023-34055</cve>
     <cve>CVE-2023-6378</cve>
     <cve>CVE-2023-35116</cve>
     <cve>CVE-2023-6481</cve>
-    <cve>CVE-2023-52428</cve>
     <cve>CVE-2024-38820</cve>
   </suppress>
 </suppressions>