From 298e3d58036c149c4c38e1a850ed2f0875bdf948 Mon Sep 17 00:00:00 2001
From: bikegeek <minnawin@ucar.edu>
Date: Tue, 9 Jul 2024 12:00:26 -0600
Subject: [PATCH] Address new vulnerability with handleClearListValCache and
 handleClearListStatCache by separating these into two try-catch blocks

---
 java/edu/ucar/metviewer/MVServlet.java | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/java/edu/ucar/metviewer/MVServlet.java b/java/edu/ucar/metviewer/MVServlet.java
index 8941acf4..af8739d8 100644
--- a/java/edu/ucar/metviewer/MVServlet.java
+++ b/java/edu/ucar/metviewer/MVServlet.java
@@ -1294,6 +1294,10 @@ public void doPost(HttpServletRequest request, HttpServletResponse response) {
             strResp.append(MVUtil.domSourceToString(docResp));
             try {
               handleClearListValCache();
+            } catch(ParserConfigurationException e) {
+              logger.error(e.getMessage());
+            }
+            try{
               handleClearListStatCache();
             } catch (ParserConfigurationException e) {
               logger.error(e.getMessage());