Suppress CVE-2019-12418

4 years ago · a4118c1cf5
parent fa1fbb49dc
commit a4118c1cf5
1 changed files with 6 additions and 0 deletions
--- a/airsonic-main/cve-suppressed.xml
+++ b/airsonic-main/cve-suppressed.xml
@ -210,4 +210,10 @@
        <gav regex="true">org.apache.tomcat.embed.*</gav>
        <cve>CVE-2019-17563</cve>
    </suppress>
+    <suppress>
+        <notes>We do not use FORM-based authentication in Tomcat</notes>
+        <gav regex="true">org.apache.tomcat.embed.*</gav>
+        <cve>CVE-2019-12418</cve>
+    </suppress>
+
 </suppressions>