Insecure version of Spring Web MVC used in Confluence Analytics

Hello! A transitive dependency issue has been found in Confluence Analytics:
https://atlassian.sourceclear.io/workspaces/Paaina7/issues/vulnerabilities/26465610

Confluence Analytics has a transitive dependency on the Spring Web MVC library, which has a security bug.

The issue can be fixed by overriding and adding a new direct dependency of the library in your project.

We do not have a confirmed fix for this issue yet. However, newer versions of the library have been released. We suggest that you upgrade to 4.3.20.RELEASE, which is considered safe.

To upgrade, update the pom.xml file:
{code:java}

• <dependency>
• <groupId>org.springframework</groupId>
• <artifactId>spring-webmvc</artifactId>
• <version>4.3.20.RELEASE</version>
• </dependency>
  {code}