Question

Vulnerable Java Libraries

0

Hi all, Is it possible to see which marketplace modules use which java libraries - we had a penetration test recently and it highlight a few vulnerable libraries, I wanted to see which modules used them. Many thanks, Garion

asked 2024-03-18

Garion Swann

1 answers

Eline Bijkerk · Accepted Answer · 2024-03-18

If you look at your userlib in the project, you should see both the library (e.g. with a name like "commons-codec-1.15.jar") and a "requiredlib" file, like "commons-codec-1.15.jar.ExcelImporter.RequiredLib". These files should show you which module uses a library (in this case, the ExcelImporter). Do make sure you test properly after updating or removing a library.