René's URL Explorer Experiment


Title: [Snyk] Fix for 13 vulnerabilities by devopsadmin12 · Pull Request #1 · devopsadmin12/JavaVulnerableLab · GitHub

Open Graph Title: [Snyk] Fix for 13 vulnerabilities by devopsadmin12 · Pull Request #1 · devopsadmin12/JavaVulnerableLab

X Title: [Snyk] Fix for 13 vulnerabilities by devopsadmin12 · Pull Request #1 · devopsadmin12/JavaVulnerableLab

Description: This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project. Changes included in this PR Changes to the following files to upgrade the vulnerable dependencies to a fixed version: pom.xml Vulnerabilities that will be fixed With an upgrade: Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity 919/1000 Why? Mature exploit, Has a fix available, CVSS 9.8 Deserialization of Untrusted Data SNYK-JAVA-COMMONSCOLLECTIONS-30078 org.hibernate:hibernate-core: 4.0.1.Final -> 5.4.24.Final No Mature 601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6 Deserialization of Untrusted Data SNYK-JAVA-COMMONSCOLLECTIONS-472711 org.hibernate:hibernate-core: 4.0.1.Final -> 5.4.24.Final No Proof of Concept 529/1000 Why? Has a fix available, CVSS 6.3 Privilege Escalation SNYK-JAVA-MYSQL-174574 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 Yes No Known Exploit 616/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.9 XML External Entity (XXE) Injection SNYK-JAVA-MYSQL-1766958 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 Yes Proof of Concept 544/1000 Why? Has a fix available, CVSS 6.6 Improper Authorization SNYK-JAVA-MYSQL-2386864 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 Yes No Known Exploit 639/1000 Why? Has a fix available, CVSS 8.5 Improper Access Control SNYK-JAVA-MYSQL-31399 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 No No Known Exploit 379/1000 Why? Has a fix available, CVSS 3.3 Improper Access Control SNYK-JAVA-MYSQL-31449 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 No No Known Exploit 534/1000 Why? Has a fix available, CVSS 6.4 Arbitrary Code Execution SNYK-JAVA-MYSQL-31580 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 No No Known Exploit 656/1000 Why? Mature exploit, Has a fix available, CVSS 5.4 SQL Injection SNYK-JAVA-MYSQL-451460 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 No Mature 654/1000 Why? Has a fix available, CVSS 8.8 Access Control Bypass SNYK-JAVA-MYSQL-451464 mysql:mysql-connector-java: 5.1.26 -> 8.0.28 Yes No Known Exploit 635/1000 Why? Has a fix available, CVSS 8.2 SQL Injection SNYK-JAVA-ORGHIBERNATE-1041788 org.hibernate:hibernate-core: 4.0.1.Final -> 5.4.24.Final Yes No Known Exploit 619/1000 Why? Has a fix available, CVSS 8.1 SQL Injection SNYK-JAVA-ORGHIBERNATE-584563 org.hibernate:hibernate-core: 4.0.1.Final -> 5.4.24.Final Yes No Known Exploit 696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 Denial of Service (DoS) SNYK-JAVA-ORGJSON-2841369 org.json:json: 20090211 -> 20180130 Yes Proof of Concept (*) Note that the real score may have changed since the PR was raised. Check the changes in this PR to ensure they won't cause issues with your project. Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs. For more information: 🧐 View latest project report 🛠 Adjust project settings 📚 Read more about Snyk's upgrade and patch logic Learn how to fix vulnerabilities with free interactive lessons: 🦉 Deserialization of Untrusted Data 🦉 Deserialization of Untrusted Data 🦉 XML External Entity (XXE) Injection 🦉 More lessons are available in Snyk Learn

Open Graph Description: This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project. Changes i...

X Description: This PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project. Changes i...

Opengraph URL: https://github.com/devopsadmin12/JavaVulnerableLab/pull/1

X: @github

direct link

Domain: patch-diff.githubusercontent.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:e5e06b5d-781d-2b09-a373-3d052b9464dc
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idD096:31F6F5:5FA773:882B6A:6979ED94
html-safe-nonce6b9485c68a6d04d47bafe225636d43c94c8b17956ed92c73ceafcab1695d9ddb
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEMDk2OjMxRjZGNTo1RkE3NzM6ODgyQjZBOjY5NzlFRDk0IiwidmlzaXRvcl9pZCI6IjYxNTU2Mzk2NjExNzIyMjMzODAiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmacf0fd336ede7b9bc3a514c0a2f984267a0ac77b0bcbc25f8a251630d825ea91c2
hovercard-subject-tagpull_request:1245953929
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/devopsadmin12/JavaVulnerableLab/pull/1/files
twitter:imagehttps://avatars.githubusercontent.com/u/94431252?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/94431252?s=400&v=4
og:image:altThis PR was automatically created by Snyk using the credentials of a real user.Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project. Changes i...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Noned518616844426fb176f4177c4776349f6e70ef1ce75f459c8c53bf9293bb6982
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/devopsadmin12/JavaVulnerableLab git https://github.com/devopsadmin12/JavaVulnerableLab.git
octolytics-dimension-user_id94431252
octolytics-dimension-user_logindevopsadmin12
octolytics-dimension-repository_id522487972
octolytics-dimension-repository_nwodevopsadmin12/JavaVulnerableLab
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forktrue
octolytics-dimension-repository_parent_id28911199
octolytics-dimension-repository_parent_nwoCSPF-Founder/JavaVulnerableLab
octolytics-dimension-repository_network_root_id28911199
octolytics-dimension-repository_network_root_nwoCSPF-Founder/JavaVulnerableLab
turbo-body-classeslogged-out env-production page-responsive
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release22c6ce7724007ae85d7487fce3308a1c7cea8be6
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes#start-of-content
https://patch-diff.githubusercontent.com/
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdevopsadmin12%2FJavaVulnerableLab%2Fpull%2F1%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub SparkBuild and deploy intelligent appshttps://github.com/features/spark
GitHub ModelsManage and compare promptshttps://github.com/features/models
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Fdevopsadmin12%2FJavaVulnerableLab%2Fpull%2F1%2Ffiles
Sign up https://patch-diff.githubusercontent.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=devopsadmin12%2FJavaVulnerableLab
Reloadhttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes
Reloadhttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes
Reloadhttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes
devopsadmin12 https://patch-diff.githubusercontent.com/devopsadmin12
JavaVulnerableLabhttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab
CSPF-Founder/JavaVulnerableLabhttps://patch-diff.githubusercontent.com/CSPF-Founder/JavaVulnerableLab
Notifications https://patch-diff.githubusercontent.com/login?return_to=%2Fdevopsadmin12%2FJavaVulnerableLab
Fork 0 https://patch-diff.githubusercontent.com/login?return_to=%2Fdevopsadmin12%2FJavaVulnerableLab
Star 0 https://patch-diff.githubusercontent.com/login?return_to=%2Fdevopsadmin12%2FJavaVulnerableLab
Code https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab
Pull requests 2 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pulls
Actions https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/actions
Projects 0 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/projects
Security 0 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/security
Insights https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pulse
Code https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab
Pull requests https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pulls
Actions https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/actions
Projects https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/projects
Security https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/security
Insights https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pulse
Sign up for GitHub https://patch-diff.githubusercontent.com/signup?return_to=%2Fdevopsadmin12%2FJavaVulnerableLab%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://patch-diff.githubusercontent.com/login?return_to=%2Fdevopsadmin12%2FJavaVulnerableLab%2Fissues%2Fnew%2Fchoose
devopsadmin12https://patch-diff.githubusercontent.com/devopsadmin12
masterhttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/tree/master
snyk-fix-ffda30e6bff68c2ffd66862cfb4590fchttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/tree/snyk-fix-ffda30e6bff68c2ffd66862cfb4590fc
Conversation 0 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1
Commits 1 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/commits
Checks 0 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/checks
Files changed https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/files
Please reload this pagehttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes
[Snyk] Fix for 13 vulnerabilities https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes#top
Show all changes 1 commit https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/files
f71bc19 fix: pom.xml to reduce vulnerabilities snyk-bot Feb 18, 2023 https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/commits/f71bc19ea4e346e1135d8109ceb1419b04edc5da
Clear filters https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/files
Please reload this pagehttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes
Please reload this pagehttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes
pom.xmlhttps://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8
View file https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/blob/f71bc19ea4e346e1135d8109ceb1419b04edc5da/pom.xml
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/{{ revealButtonHref }}
https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8
https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8
https://patch-diff.githubusercontent.com/devopsadmin12/JavaVulnerableLab/pull/1/changes#diff-9c5fb3d1b7e3b0f54bc5c4182965c4fe1f9023d449017cece3005d3f90e8e4d8
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.