Details
Major Description
Our shaded quartz library includes a version of quartz that is vulnerable to CVE-2019-13990 (https://github.com/quartz-scheduler/quartz/issues/467). Although we don't have a code-path through XMLSchedulingDataProcessor, it makes sense to patch this as a user could theoretically use it, and libraries showing up with vulnerabilities can be a blocker to using TomEE.