Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 5.3.2
Report Generated On: Mon, 20 Apr 2020 20:11:54 +0200
Dependencies Scanned: 17 (17 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE Checked: 2020-04-20T20:09:46
NVD CVE Modified: 2020-04-20T18:03:43
VersionCheckOn: 2020-04-19T10:27:56

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
commons-fileupload-1.4.jar	cpe:2.3:a:apache:commons_fileupload:1.4:::::::*	pkg:maven/commons-fileupload/commons-fileupload@1.4	Highest	40
commons-io-2.6.jar		pkg:maven/commons-io/commons-io@2.6		40
commons-lang3-3.10.jar		pkg:maven/org.apache.commons/commons-lang3@3.10		40
commons-text-1.8.jar		pkg:maven/org.apache.commons/commons-text@1.8		41
freemarker-2.3.30.jar		pkg:maven/org.freemarker/freemarker@2.3.30		44
javassist-3.24.1-GA.jar		pkg:maven/org.javassist/javassist@3.24.1-GA		26
log4j-api-2.13.1.jar	cpe:2.3:a:apache:log4j:2.13.1:::::::*	pkg:maven/org.apache.logging.log4j/log4j-api@2.13.1	Highest	46
ognl-3.2.14.jar	cpe:2.3:a:ognl_project:ognl:3.2.14:::::::*	pkg:maven/ognl/ognl@3.2.14	Highest	20
struts2-core-2.6-SNAPSHOT.jar	cpe:2.3:a:apache:struts:2.6:snapshot::::::	pkg:maven/org.apache.struts/struts2-core@2.6-20200419.094131-295 pkg:maven/org.apache.struts/struts2-core@2.6-SNAPSHOT	Highest	38
struts2-core-2.6-SNAPSHOT.jar: domTT.js				0
struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js				0
struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js				0
struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js				0
struts2-core-2.6-SNAPSHOT.jar: utils.js				0
struts2-core-2.6-SNAPSHOT.jar: validation.js				0
struts2-core-2.6-SNAPSHOT.jar: validation.js				0
struts2-core-2.6-SNAPSHOT.jar: webconsole.js				0

Dependencies

commons-fileupload-1.4.jar

Description:

    The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart
    file upload functionality to servlets and web applications.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-fileupload/commons-fileupload/1.4/commons-fileupload-1.4.jar
MD5: 0c3b924dcaaa90c3fb93fe04ae96a35e
SHA1: f95188e3d372e20e7328706c37ef366e5d7859b0
SHA256:a4ec02336f49253ea50405698b79232b8c5cbf02cb60df3a674d77a749a1def7
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-fileupload/	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	fileupload	Highest
Vendor	pom	url	http://commons.apache.org/proper/commons-fileupload/	Highest
Vendor	pom	groupid	commons-fileupload	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	artifactid	commons-fileupload	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-fileupload/	Low
Vendor	Manifest	implementation-build	UNKNOWN@r047f31576411beee69cf75584ae76531cc9ac753; 2018-12-24 07:06:18+0000	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	name	Apache Commons FileUpload	High
Vendor	file	name	commons-fileupload	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-fileupload	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	specification-title	Apache Commons FileUpload	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-fileupload/	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	apache	Highest
Product	jar	package name	fileupload	Highest
Product	Manifest	Implementation-Title	Apache Commons FileUpload	High
Product	Manifest	Bundle-Name	Apache Commons FileUpload	Medium
Product	pom	groupid	commons-fileupload	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	url	http://commons.apache.org/proper/commons-fileupload/	Medium
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-fileupload/	Low
Product	pom	artifactid	commons-fileupload	Highest
Product	Manifest	implementation-build	UNKNOWN@r047f31576411beee69cf75584ae76531cc9ac753; 2018-12-24 07:06:18+0000	Low
Product	pom	name	Apache Commons FileUpload	High
Product	file	name	commons-fileupload	High
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-fileupload	Medium
Version	pom	parent-version	1.4	Low
Version	pom	version	1.4	Highest
Version	file	version	1.4	High
Version	Manifest	Implementation-Version	1.4	High

Identifiers

pkg:maven/commons-fileupload/commons-fileupload@1.4 (Confidence:High)
cpe:2.3:a:apache:commons_fileupload:1.4:*:*:*:*:*:*:* (Confidence:Highest)

commons-io-2.6.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/commons-io/commons-io/2.6/commons-io-2.6.jar
MD5: 467c2a1f64319c99b5faf03fc78572af
SHA1: 815893df5f31da2ece4040fe0a12fd44b577afaf
SHA256:f877d304660ac2a142f3865badfc971dec7ed73c747c7f8d5d2f5139ca736513
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.apache.commons.io	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-io/	Low
Vendor	pom	groupid	commons-io	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	http://commons.apache.org/proper/commons-io/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	Manifest	implementation-url	http://commons.apache.org/proper/commons-io/	Low
Vendor	file	name	commons-io	High
Vendor	jar	package name	io	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	pom	artifactid	commons-io	Low
Vendor	Manifest	Implementation-Vendor-Id	commons-io	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	Manifest	bundle-symbolicname	org.apache.commons.io	Medium
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-io/	Low
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	groupid	commons-io	Highest
Product	pom	url	http://commons.apache.org/proper/commons-io/	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	implementation-url	http://commons.apache.org/proper/commons-io/	Low
Product	file	name	commons-io	High
Product	jar	package name	io	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	name	Apache Commons IO	High
Product	pom	artifactid	commons-io	Highest
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Version	pom	version	2.6	Highest
Version	Manifest	Implementation-Version	2.6	High
Version	pom	parent-version	2.6	Low
Version	file	version	2.6	High

Identifiers

pkg:maven/commons-io/commons-io@2.6 (Confidence:High)

commons-lang3-3.10.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-lang3/3.10/commons-lang3-3.10.jar
MD5: 238dcae7363dd86b2e515a2a29e8b4d9
SHA1: e155460aaf5b464062a09c3923f089ce99128a17
SHA256:28968ae55fff465494083aeba856f8824c34902329882bf61e77246a91e25aa9
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	pom	name	Apache Commons Lang	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	artifactid	commons-lang3	Low
Vendor	file	name	commons-lang3	High
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	lang3	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	pom	name	Apache Commons Lang	High
Product	jar	package name	apache	Highest
Product	Manifest	specification-title	Apache Commons Lang	Medium
Product	file	name	commons-lang3	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	lang3	Highest
Product	pom	artifactid	commons-lang3	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	pom	groupid	apache.commons	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Version	file	version	3.10	High
Version	pom	version	3.10	Highest
Version	Manifest	Implementation-Version	3.10	High
Version	pom	parent-version	3.10	Low

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.10 (Confidence:High)

commons-text-1.8.jar

Description:

Apache Commons Text is a library focused on algorithms working on strings.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/commons/commons-text/1.8/commons-text-1.8.jar
MD5: f2243d67b348e7175f55902cdb7e54af
SHA1: 879a6bde4c0537a25504c72ec7a94ba4099f469c
SHA256:6fe7ad4ad5349d6b77e7a0e1c9f6037108a1ee48c42e7e6eb4b18f56d324f7b2
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	url	https://commons.apache.org/proper/commons-text	Highest
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	text	Highest
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	jar	package name	commons	Highest
Vendor	pom	groupid	apache.commons	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	file	name	commons-text	High
Vendor	Manifest	implementation-url	https://commons.apache.org/proper/commons-text	Low
Vendor	pom	artifactid	commons-text	Low
Vendor	Manifest	automatic-module-name	org.apache.commons.text	Medium
Vendor	pom	name	Apache Commons Text	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-text	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.apache.commons	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Product	Manifest	Bundle-Name	Apache Commons Text	Medium
Product	jar	package name	apache	Highest
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-text	Low
Product	Manifest	Implementation-Title	Apache Commons Text	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	specification-title	Apache Commons Text	Medium
Product	jar	package name	text	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	jar	package name	commons	Highest
Product	pom	groupid	apache.commons	Highest
Product	file	name	commons-text	High
Product	Manifest	implementation-url	https://commons.apache.org/proper/commons-text	Low
Product	pom	artifactid	commons-text	Highest
Product	Manifest	automatic-module-name	org.apache.commons.text	Medium
Product	pom	name	Apache Commons Text	High
Product	pom	url	https://commons.apache.org/proper/commons-text	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-text	Medium
Version	pom	parent-version	1.8	Low
Version	Manifest	Implementation-Version	1.8	High
Version	file	version	1.8	High
Version	pom	version	1.8	Highest

Identifiers

pkg:maven/org.apache.commons/commons-text@1.8 (Confidence:High)

freemarker-2.3.30.jar

Description:

    FreeMarker is a "template engine"; a generic tool to generate text output based on templates.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/freemarker/freemarker/2.3.30/freemarker-2.3.30.jar
MD5: e702848d716f17cd39fabfe2415e104e
SHA1: 86d70d335c7821178f62b554aa3a4bc538a94f1a
SHA256:6586433d90957c0b05a32bce07c71e8cebcea6afbea2e043bfe0c576c4d94338
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	freemarker.org	High
Vendor	jar	package name	template	Highest
Vendor	pom	groupid	org.freemarker	Highest
Vendor	pom	url	https://freemarker.apache.org/	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8, JavaSE-1.7, JavaSE-1.6, J2SE-1.5	Low
Vendor	pom	name	Apache FreeMarker	High
Vendor	pom	groupid	freemarker	Highest
Vendor	jar	package name	freemarker	Highest
Vendor	pom	parent-groupid	org.apache	Medium
Vendor	Manifest	extension-name	FreeMarker	Medium
Vendor	pom	parent-artifactid	apache	Low
Vendor	Manifest	dstamp	20200216	Low
Vendor	pom	artifactid	freemarker	Low
Vendor	Manifest	today	February 16 2020	Low
Vendor	pom	organization name	Apache Software Foundation	High
Vendor	pom	organization url	http://apache.org	Medium
Vendor	Manifest	tstamp	1915	Low
Vendor	file	name	freemarker	High
Vendor	Manifest	bundle-symbolicname	org.freemarker.freemarker	Medium
Vendor	Manifest	specification-vendor	freemarker.org	Low
Product	jar	package name	template	Highest
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.8, JavaSE-1.7, JavaSE-1.6, J2SE-1.5	Low
Product	pom	name	Apache FreeMarker	High
Product	pom	groupid	freemarker	Highest
Product	pom	artifactid	freemarker	Highest
Product	jar	package name	freemarker	Highest
Product	Manifest	Bundle-Name	org.freemarker.freemarker	Medium
Product	pom	parent-groupid	org.apache	Medium
Product	pom	url	https://freemarker.apache.org/	Medium
Product	Manifest	extension-name	FreeMarker	Medium
Product	pom	organization url	http://apache.org	Low
Product	Manifest	dstamp	20200216	Low
Product	pom	organization name	Apache Software Foundation	Low
Product	Manifest	today	February 16 2020	Low
Product	Manifest	specification-title	FreeMarker	Medium
Product	Manifest	tstamp	1915	Low
Product	file	name	freemarker	High
Product	Manifest	bundle-symbolicname	org.freemarker.freemarker	Medium
Product	Manifest	Implementation-Title	FreeMarker	High
Product	pom	parent-artifactid	apache	Medium
Version	Manifest	Implementation-Version	2.3.30	High
Version	pom	version	2.3.30	Highest
Version	file	version	2.3.30	High
Version	pom	parent-version	2.3.30	Low

Identifiers

pkg:maven/org.freemarker/freemarker@2.3.30 (Confidence:High)

javassist-3.24.1-GA.jar

Description:

  	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/

File Path: /Users/lukaszlenart/.m2/repository/org/javassist/javassist/3.24.1-GA/javassist-3.24.1-GA.jar
MD5: 527cebd64b0f941d5058bae3d1726d06
SHA1: 921b466d6a14a8edbe25923c973fd767fc71c045
SHA256:5d57ea5b0ec8cb46143dfe521f888b208028be126f274cc4f852e641755f1553
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	javassist	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	javassist	Highest
Vendor	pom	organization name	Shigeru Chiba, www.javassist.org	High
Vendor	pom	artifactid	javassist	Low
Vendor	pom	name	Javassist	High
Vendor	pom	groupid	org.javassist	Highest
Vendor	pom	url	http://www.javassist.org/	Highest
Vendor	jar	package name	bytecode	Highest
Vendor	Manifest	specification-vendor	Shigeru Chiba, www.javassist.org	Low
Vendor	pom	groupid	javassist	Highest
Vendor	Manifest	bundle-symbolicname	javassist	Medium
Product	file	name	javassist	High
Product	pom	artifactid	javassist	Highest
Product	pom	organization name	Shigeru Chiba, www.javassist.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	javassist	Highest
Product	Manifest	Bundle-Name	Javassist	Medium
Product	pom	name	Javassist	High
Product	pom	url	http://www.javassist.org/	Medium
Product	Manifest	specification-title	Javassist	Medium
Product	jar	package name	bytecode	Highest
Product	pom	groupid	javassist	Highest
Product	Manifest	bundle-symbolicname	javassist	Medium
Version	Manifest	specification-version	3.24.1-GA	High
Version	pom	version	3.24.1-GA	Highest

Identifiers

pkg:maven/org.javassist/javassist@3.24.1-GA (Confidence:High)

log4j-api-2.13.1.jar

Description:

The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/logging/log4j/log4j-api/2.13.1/log4j-api-2.13.1.jar
MD5: 65795ba3dfef693a82bdfb369d030439
SHA1: cc670f92dc77bbf4540904c3fa211b997cba00d8
SHA256:307fffc2623d010e3fe67d9f6b101c14bae33ec310e5f56960d491885fd59630
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	groupid	apache.logging.log4j	Highest
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Vendor	Manifest	log4jreleasekey	B3D8E1BA	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-groupid	org.apache.logging.log4j	Medium
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	jar	package name	logging	Highest
Vendor	file	name	log4j-api	High
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	pom	parent-artifactid	log4j	Low
Vendor	Manifest	multi-release	true	Low
Vendor	pom	name	Apache Log4j API	High
Vendor	jar	package name	org	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Vendor	pom	artifactid	log4j-api	Low
Vendor	jar	package name	log4j	Highest
Product	Manifest	Implementation-Title	Apache Log4j API	High
Product	jar	package name	apache	Highest
Product	pom	groupid	apache.logging.log4j	Highest
Product	Manifest	specification-title	Apache Log4j API	Medium
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Product	Manifest	log4jreleasekey	B3D8E1BA	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	org.apache.logging.log4j	Medium
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	jar	package name	logging	Highest
Product	file	name	log4j-api	High
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	log4j-api	Highest
Product	pom	name	Apache Log4j API	High
Product	jar	package name	org	Highest
Product	pom	parent-artifactid	log4j	Medium
Product	Manifest	Bundle-Name	Apache Log4j API	Medium
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Product	jar	package name	log4j	Highest
Version	file	version	2.13.1	High
Version	pom	version	2.13.1	Highest
Version	Manifest	Implementation-Version	2.13.1	High
Version	Manifest	Bundle-Version	2.13.1	High
Version	Manifest	log4jreleaseversion	2.13.1	Medium

Identifiers

pkg:maven/org.apache.logging.log4j/log4j-api@2.13.1 (Confidence:High)
cpe:2.3:a:apache:log4j:2.13.1:*:*:*:*:*:*:* (Confidence:Highest)

ognl-3.2.14.jar

Description:

OGNL - Object Graph Navigation Library

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/ognl/ognl/3.2.14/ognl-3.2.14.jar
MD5: 0baa4d72fcb508e100c821518e5cdf19
SHA1: 18178dd7cfcb8b81c262c072b60a5bf701073917
SHA256:02da5bd743cbaab1ebb61a17844b122f52cc69d10b23a8e3356f55c1e6988e71
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	ognl	Low
Vendor	pom	organization url	http://www.opensymphony.com	Medium
Vendor	pom	name	OGNL - Object Graph Navigation Library	High
Vendor	pom	organization name	OpenSymphony	High
Vendor	pom	groupid	ognl	Highest
Vendor	file	name	ognl	High
Vendor	Manifest	automatic-module-name	ognl	Medium
Vendor	pom	url	jkuhnert/ognl/	Highest
Vendor	jar	package name	ognl	Highest
Product	pom	url	jkuhnert/ognl/	High
Product	pom	name	OGNL - Object Graph Navigation Library	High
Product	pom	artifactid	ognl	Highest
Product	pom	groupid	ognl	Highest
Product	file	name	ognl	High
Product	Manifest	automatic-module-name	ognl	Medium
Product	jar	package name	ognl	Highest
Product	pom	organization name	OpenSymphony	Low
Product	pom	organization url	http://www.opensymphony.com	Low
Version	file	version	3.2.14	High
Version	pom	version	3.2.14	Highest

Identifiers

pkg:maven/ognl/ognl@3.2.14 (Confidence:High)
cpe:2.3:a:ognl_project:ognl:3.2.14:*:*:*:*:*:*:* (Confidence:Highest)

struts2-core-2.6-SNAPSHOT.jar

Description:

Apache Struts 2

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar
MD5: bdabb37e4b04f29f4ca390fa2aefce44
SHA1: 64a03701b6797529aaa7cb200f803b7b26c6bb3f
SHA256:e2932ae7ddfa0747221ea42a6d12263237248e3ab9c2ed12b162c13a06147183
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	jar	package name	struts2	Highest
Vendor	Manifest	implementation-url	http://struts.apache.org/struts2-core/	Low
Vendor	pom	groupid	apache.struts	Highest
Vendor	Manifest	bundle-docurl	http://www.apache.org	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	struts2-core	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.struts	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Struts 2 Core	High
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	pom	parent-artifactid	struts2-parent	Low
Vendor	file	name	struts2-core	High
Vendor	pom	groupid	org.apache.struts	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.struts.2-core	Medium
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	parent-groupid	org.apache.struts	Medium
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	jar	package name	struts2	Highest
Product	Manifest	implementation-url	http://struts.apache.org/struts2-core/	Low
Product	pom	groupid	apache.struts	Highest
Product	pom	parent-artifactid	struts2-parent	Medium
Product	Manifest	bundle-docurl	http://www.apache.org	Low
Product	jar	package name	apache	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	struts2-core	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Struts 2 Core	High
Product	jar	package name	filter	Highest
Product	Manifest	Bundle-Name	Struts 2 Core	Medium
Product	file	name	struts2-core	High
Product	Manifest	bundle-symbolicname	org.apache.struts.2-core	Medium
Product	pom	parent-groupid	org.apache.struts	Medium
Product	Manifest	Implementation-Title	Struts 2 Core	High
Product	Manifest	specification-title	Struts 2 Core	Medium
Version	Manifest	Implementation-Version	2.6-SNAPSHOT	High
Version	pom	version	2.6-SNAPSHOT	Highest

Identifiers

pkg:maven/org.apache.struts/struts2-core@2.6-20200419.094131-295 (Confidence:Highest)
pkg:maven/org.apache.struts/struts2-core@2.6-SNAPSHOT (Confidence:High)
cpe:2.3:a:apache:struts:2.6:snapshot:*:*:*:*:*:* (Confidence:Highest)

struts2-core-2.6-SNAPSHOT.jar: domTT.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/domTT.js
MD5: 44ed51154c7fa928005f39bbbed7d01a
SHA1: 5584aa1028220f041ff7d89c48e9e8ffeaa05256
SHA256:60c72fad5a9688fc6a143176d84814b9ea2c4c9c882b4799921b950c415b961e
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/inputtransferselect.js
MD5: 2955e039eab5ef8216705c05d239f378
SHA1: 94316238b9eb45a97e2547fa66881cca27a5b6ee
SHA256:e5ef24f60cfb27a88880ee89ba6eb4664bbebe0c32d3dc1ce385cbe6d8b01194
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/jshint.conf.js
MD5: 7b7c2d7894e972b45298ea8d533008d7
SHA1: 5a88e8d212d51cdc3ac0305978dfc483ce25fa25
SHA256:15942ecb04925afc65666d3d8f758ed0e65f90f7b5faec2b7381e29e397200c6
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/optiontransferselect.js
MD5: f4194635b442cd6a9354132eb1f5c544
SHA1: 51fd3c3d66bed260a48bcc1bc9f56c799acab501
SHA256:2028278976d9adfaa90186556cca99bbd476df3818155161d877272b738cc762
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: utils.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/static/utils.js
MD5: a1287feb0882f494dc6ebfbdcb2c8d6a
SHA1: 61201962d41fec8139c940c5a1468796d49a6139
SHA256:309abee1bddd03fe16c196e2cc00b58318ff707764824d9b71a38f667736720d
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: validation.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/template/xhtml/validation.js
MD5: dea68bdb50b41aee5fc61170e3faf14e
SHA1: affda7d0fecb0d16b9ebfc119833ec50ee920b4b
SHA256:fdbcbc87e6495252ff1d697712e1604733d1cf6299b2f7075fdc27c2fa23687e
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: validation.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/template/css_xhtml/validation.js
MD5: c66d23a2391879f74077a1af7888ede7
SHA1: c4c980b34207fbca373f2032c770371606220da2
SHA256:ec4dc0658f00c3a64e9a890565a3dfb71678babb484d2960c22f123c10f2c03c
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

struts2-core-2.6-SNAPSHOT.jar: webconsole.js

File Path: /Users/lukaszlenart/.m2/repository/org/apache/struts/struts2-core/2.6-SNAPSHOT/struts2-core-2.6-SNAPSHOT.jar/org/apache/struts2/interceptor/debugging/webconsole.js
MD5: a7202aefd2637c63ee607db0a608c6de
SHA1: 5618fb1f032d4972287158e5754570992448695d
SHA256:9ab03200e9abb3ddb95ee83321b518d660ba0734683c3a6844c633a5c5dbabfd
Referenced In Project/Scope:Struts 2 Pell Multipart Plugin:compile

Evidence

Identifiers

None

How to read the report | Suppressing false positives | Getting Help: github issues

Project: Struts 2 Pell Multipart Plugin

org.apache.struts:struts2-pell-multipart-plugin:2.6-SNAPSHOT

Summary

Dependencies

commons-fileupload-1.4.jar

Evidence

Identifiers

commons-io-2.6.jar

Evidence

Identifiers

commons-lang3-3.10.jar

Evidence

Identifiers

commons-text-1.8.jar

Evidence

Identifiers

freemarker-2.3.30.jar

Evidence

Identifiers

javassist-3.24.1-GA.jar

Evidence

Identifiers

log4j-api-2.13.1.jar

Evidence

Identifiers

ognl-3.2.14.jar

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: domTT.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: inputtransferselect.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: jshint.conf.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: optiontransferselect.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: utils.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: validation.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: validation.js

Evidence

Identifiers

struts2-core-2.6-SNAPSHOT.jar: webconsole.js

Evidence

Identifiers