|
1 | | -# INTENTIONALLY VULNERABLE PYTHON PACKAGES |
2 | | -Django==2.2.0 |
3 | | -requests==2.20.0 |
4 | | -urllib3==1.24.0 |
5 | | -Pillow==6.0.0 |
6 | | -cryptography==2.8 |
7 | | -PyYAML==5.1 |
8 | | -Jinja2==2.10.0 |
9 | | -Flask==1.0.0 |
| 1 | +<?xml version="1.0" encoding="UTF-8"?> |
| 2 | +<project xmlns="http://maven.apache.org/POM/4.0.0" |
| 3 | + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" |
| 4 | + xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 |
| 5 | + http://maven.apache.org/xsd/maven-4.0.0.xsd"> |
| 6 | + <modelVersion>4.0.0</modelVersion> |
| 7 | + |
| 8 | + <groupId>com.example</groupId> |
| 9 | + <artifactId>vulnerability-test</artifactId> |
| 10 | + <version>1.0.0</version> |
| 11 | + |
| 12 | + <dependencies> |
| 13 | + <!-- INTENTIONALLY VULNERABLE JAVA PACKAGES --> |
| 14 | + |
| 15 | + <!-- 1. Log4j - CRITICAL CVE --> |
| 16 | + <dependency> |
| 17 | + <groupId>org.apache.logging.log4j</groupId> |
| 18 | + <artifactId>log4j-core</artifactId> |
| 19 | + <version>2.14.0</version> |
| 20 | + </dependency> |
| 21 | + |
| 22 | + <!-- 2. Spring Framework - OLD VERSION --> |
| 23 | + <dependency> |
| 24 | + <groupId>org.springframework</groupId> |
| 25 | + <artifactId>spring-core</artifactId> |
| 26 | + <version>5.2.0.RELEASE</version> |
| 27 | + </dependency> |
| 28 | + |
| 29 | + <!-- 3. Jackson Databind - OLD VERSION --> |
| 30 | + <dependency> |
| 31 | + <groupId>com.fasterxml.jackson.core</groupId> |
| 32 | + <artifactId>jackson-databind</artifactId> |
| 33 | + <version>2.9.0</version> |
| 34 | + </dependency> |
| 35 | + |
| 36 | + <!-- 4. Apache Commons Collections - OLD VERSION --> |
| 37 | + <dependency> |
| 38 | + <groupId>org.apache.commons</groupId> |
| 39 | + <artifactId>commons-collections4</artifactId> |
| 40 | + <version>4.0</version> |
| 41 | + </dependency> |
| 42 | + </dependencies> |
| 43 | +</project> |
0 commit comments