fix log4j vulnerability

leonardovannucci

2022-04-01 c8a8b0375eaf98ba7485983bd07fbfe2186a0dd3

 dg1cloud-core/pom.xml
..
..
@@ -31,6 +31,55 @@
31
31
 		</dependency>
32
32
 		
33
33
 		<dependency>
34
+			<groupId>org.springframework.boot</groupId>
35
+			<artifactId>spring-boot-starter-log4j2</artifactId>
36
+			<exclusions>
37
+				<exclusion>
38
+					<groupId>org.apache.logging.log4j</groupId>
39
+					<artifactId>log4j-core</artifactId>
40
+				</exclusion>
41
+				<exclusion>
42
+					<groupId>org.apache.logging.log4j</groupId>
43
+					<artifactId>log4j-to-slf4j</artifactId>
44
+				</exclusion>
45
+				<exclusion>
46
+					<groupId>org.apache.logging.log4j</groupId>
47
+					<artifactId>log4j-slf4j-impl</artifactId>
48
+				</exclusion>
49
+				<exclusion>
50
+					<groupId>org.apache.logging.log4j</groupId>
51
+					<artifactId>log4j-jul</artifactId>
52
+				</exclusion>
53
+			</exclusions>
54
+		</dependency>
55
+		
56
+		<dependency>
57
+			<groupId>org.apache.logging.log4j</groupId>
58
+			<artifactId>log4j-api</artifactId>
59
+			<version>2.17.1</version>
60
+		</dependency>
61
+		<dependency>
62
+			<groupId>org.apache.logging.log4j</groupId>
63
+			<artifactId>log4j-core</artifactId>
64
+			<version>2.17.1</version>
65
+		</dependency>
66
+		<!-- dependency>
67
+			<groupId>org.apache.logging.log4j</groupId>
68
+			<artifactId>log4j-to-slf4j</artifactId>
69
+			<version>2.17.1</version>
70
+		</dependency>
71
+		<dependency>
72
+			<groupId>org.apache.logging.log4j</groupId>
73
+			<artifactId>log4j-slf4j-impl</artifactId>
74
+			<version>2.17.1</version>
75
+		</dependency>
76
+		<dependency>
77
+			<groupId>org.apache.logging.log4j</groupId>
78
+			<artifactId>log4j-jul</artifactId>
79
+			<version>2.17.1</version>
80
+		</dependency-->
81
+		
82
+		<dependency>
34
83
 			<groupId>org.flywaydb</groupId>
35
84
 			<artifactId>flyway-core</artifactId>
36
85
 			<version>4.0.1</version>