c3p0 library具高風險漏洞(CVE-2018-20433)

用途：
connection pool

風險：
c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization.

參考：
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20433

解決方式：
將c3p0-0.9.5.2.jar更換成c3p0-0.9.5.2-redhat-007.jar