CCD-5950: (#159)

Fix CVE-2024-38820, upgraded springSecurity and ext['spring-security.version'] from 5.8.10 to 5.8.15

Co-authored-by: shahirali <[email protected]>

Author: shahir-ali

build.gradle

@@ -168,13 +168,13 @@ ext {
   junitJupiterVersion = '5.9.3'
   junitVintageVersion = '5.9.3'
   powermockVersion = '2.0.9'
-  springSecurity   =  '5.8.10'
+  springSecurity   =  '5.8.15'
   springCloudVersion = '2021.0.7'
 }
 
 ext['jackson.version'] = '2.15.3'
 ext['snakeyaml.version'] = '2.0'
-ext['spring-security.version'] = '5.8.10'
+ext['spring-security.version'] = '5.8.15'
 
 dependencies {
   //implementation group: 'com.nimbusds', name: 'nimbus-jose-jwt', version: '9.37.2' //Fix for CVE-2023-52428

config/owasp/suppressions.xml

@@ -6,12 +6,10 @@
         CVE-2023-35116 refer [Ticket]
         CVE-2023-6481 refer [Ticket]
         CVE-2023-6481 refer [Ticket]
-    
-        CVE-2024-38820 refer [Ticket]</notes>
+    </notes>
     <cve>CVE-2023-34055</cve>
     <cve>CVE-2023-6378</cve>
     <cve>CVE-2023-35116</cve>
     <cve>CVE-2023-6481</cve>
-    <cve>CVE-2024-38820</cve>
   </suppress>
 </suppressions>