maheshgurav / schoolapp Goto Github PK

org.hibernate.service.ServiceRegistryBuilder is deprecated, please update this class using StandardServiceRegistryBuilder.

Let me know if I can work on this issue.

com.samarthsoft.prabandhak.services.common.RmiRegistryStarter and

com.samarthsoft.prabandhak.services.common.RmiStarter

Check its usage and remove the files if those are not in use as it has several deprecations.

As you are using an older version of log4j it is exposed below vulnerability :

GHSA-fp5r-v3w9-4333.

Please upgrade to Log4j2.X version.

saveOrUpdate method is deprecated, use persist instead of it. The change is at multiple places.

save() is deprecated since Hibernate 6.0. The javadoc suggests to use persist() instead.

Issue: the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed.

Resolution: Please upgrade log4j to a newer version.

Hi , I like this repository and the idea of it. do you need some help in adding some functionality to this app.

I am looking to make some contribution. Let me know if you need some help

Is there a setup doc available for this?

Thank you