scala log4j漏洞

pb3s4cty  于 2022-11-06  发布在  Scala
关注(0)|答案(1)|浏览(196)

我在pom.xml中使用了下面的scala依赖项,但它会产生log4j漏洞错误。

<properties>
        <maven.compiler.source>1.8</maven.compiler.source>
        <maven.compiler.target>1.8</maven.compiler.target>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
        <scala.major.version>2.11</scala.major.version>
        <scala.minor.version>2.11.12</scala.minor.version>
        <gridgain.version>8.7.8</gridgain.version>
        <ignite.version>2.7.0</ignite.version>
        <spark.version>2.3.0</spark.version>
        <spring.boot.version>2.4.0</spring.boot.version>
        <maven-release-plugin-version>2.5.3</maven-release-plugin-version>
        <maven-assembly-plugin-version>3.1.1</maven-assembly-plugin-version>
 </properties>

 <dependencyManagement>
        <dependencies>
            <dependency>
                <groupId>org.gridgain</groupId>
                <artifactId>gridgain-core</artifactId>
                <version>${gridgain.version}</version>
            </dependency>
            <dependency>
                <groupId>org.gridgain</groupId>
            <artifactId>ignite-spring</artifactId>
                <version>${gridgain.version}</version>
            </dependency>
            <dependency>
                <groupId>org.gridgain</groupId>
                <artifactId>ignite-indexing</artifactId>
                <version>${gridgain.version}</version>
            </dependency>
            <dependency>
                <groupId>org.gridgain</groupId>
                <artifactId>ignite-log4j2</artifactId>
                <version>${gridgain.version}</version>
            </dependency>
            <dependency>
                <groupId>org.springframework.boot</groupId>
                <artifactId>spring-boot-dependencies</artifactId>
                <version>2.1.3.RELEASE</version>
                <type>pom</type>
                <scope>import</scope>
            </dependency>
        <dependency>
                <groupId>com.typesafe.scala-logging</groupId>
                <artifactId>scala-logging_${scala.major.version}</artifactId>
                <version>3.9.0</version>
            </dependency>
            <dependency>
                <groupId>org.scalatest</groupId>
                <artifactId>scalatest_${scala.major.version}</artifactId>
                <version>3.0.4</version>
                <scope>test</scope>
            </dependency>
            <dependency>
                <groupId>org.scala-lang</groupId>
                <artifactId>scala-library</artifactId>
                <version>${scala.minor.version}</version>
                <scope>provided</scope>
            </dependency>
            <dependency>
                <groupId>org.scala-lang</groupId>
                <artifactId>scala-reflect</artifactId>
                <version>${scala.minor.version}</version>
                <scope>provided</scope>
            </dependency>
            <dependency>
                <groupId>org.apache.maven.surefire</groupId>
                <artifactId>surefire-junit4</artifactId>
                <version>2.22.1</version>
            </dependency>
        </dependencies>
    </dependencyManagement>
    <dependencies>
        <dependency>
            <groupId>junit</groupId>
            <artifactId>junit</artifactId>
            <version>4.12</version>
            <scope>test</scope>
        </dependency>
        <dependency>
            <groupId>org.scalatest</groupId>
            <artifactId>scalatest_${scala.major.version}</artifactId>
    </dependency>
    </dependencies>
    <build>
        <pluginManagement>
            <plugins>
                <plugin>
                      <artifactId>maven-release-plugin</artifactId>
                      <version>2.5.3</version>   
                </plugin>
                <plugin>
                    <groupId>net.alchim31.maven</groupId>
                    <artifactId>scala-maven-plugin</artifactId>
                    <version>4.0.1</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>compile</goal>
                                <goal>testCompile</goal>
                            </goals>
                        </execution>
    </executions>
                    <configuration>
                        <args>
                            <!-- work-around for https://issues.scala-lang.org/browse/SI-8358 -->
                            <arg>-nobootcp</arg>
                        </args>
                    </configuration>
                </plugin>
                <plugin>
                    <groupId>org.springframework.boot</groupId>
                    <artifactId>spring-boot-maven-plugin</artifactId>
                    <version>${spring.boot.version}</version>
                    <executions>
                        <execution>
                            <goals>
                                <goal>repackage</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>
 <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-assembly-plugin</artifactId>
                    <version>${maven-assembly-plugin-version}</version>
                    <configuration>
                        <finalName>${project.build.finalName}</finalName>
                        <appendAssemblyId>false</appendAssemblyId>
                    </configuration>
                </plugin>
                <plugin>
                    <groupId>org.apache.maven.plugins</groupId>
                    <artifactId>maven-surefire-plugin</artifactId>
                    <version>2.22.1</version>
                    <configuration>
                        <skipTests>true</skipTests>
                    </configuration>
                </plugin>
                <plugin>
                    <groupId>org.scalatest</groupId>
                    <artifactId>scalatest-maven-plugin</artifactId>
  <version>2.0.0</version>
                    <configuration>
                        <reportsDirectory>${project.build.directory}/surefire-reports</reportsDirectory>
                        <junitxml>.</junitxml>
                    </configuration>
                    <executions>
                        <execution>
                            <id>test</id>
                            <goals>
                                <goal>test</goal>
                            </goals>
                        </execution>
                    </executions>
                </plugin>
                <plugin>
                    <groupId>com.soebes.maven.plugins</groupId>
                    <artifactId>iterator-maven-plugin</artifactId>
                    <version>0.5.0</version>
                    <executions>
                        <execution>
 <phase>package</phase>
                            <goals>
                                <goal>iterator</goal>
                            </goals>
                            <configuration>
                                <folder>../deployment/config</folder>
                                <pluginExecutors>
                                    <pluginExecutor>
                                        <goal>single</goal>
                                        <plugin>
                                            <groupId>org.apache.maven.plugins</groupId>
                                            <artifactId>maven-assembly-plugin</artifactId>
                                            <version>${maven-assembly-plugin-version}</version>
                                        </plugin>
                                        <configuration>
                                            <finalName>${project.artifactId}</finalName>

 </configuration>
                                    </pluginExecutor>
                                </pluginExecutors>
                            </configuration>
                        </execution>
                    </executions>
                </plugin>
            </plugins>

出现以下错误。
[错误]无法在项目上执行目的net.alchim31.maven:scala-maven-plugin:4.0.1:编译(预设)执行目的net.alchim31.maven的预设:scala-maven-plugin:4.0.1:编译失败:插件net.alchim31.maven:scala-maven-plugin:4.0.1或它的一个依赖项无法解析:无法传送文件夹到文件夹中。错误代码403,请求的文件夹已被隔离-〉[Help 1]
内部使用log4j-core-2.8.1.jar的依赖项以及如何将log4j更新到最新的2.17.0?

相关问题