addresses CVE-2023-20873, CVE-2023-20862 (#558)

https://tools.hmcts.net/jira/browse/DTSRD-295
https://tools.hmcts.net/jira/browse/DTSRD-296

### Change description ###

addresses CVE-2023-20873
remedied in spring-boot 2.7.11 - https://spring.io/security/cve-2023-20873

addresses CVE-2023-20862
remedied in spring-security 5.7.8 - https://spring.io/security/cve-2023-20862

build.gradle

@@ -12,7 +12,7 @@ plugins {
     id "info.solidsoft.pitest" version '1.7.0'
     id 'io.spring.dependency-management' version '1.1.0'
     id 'org.sonarqube' version '3.3'
-    id 'org.springframework.boot' version '2.7.7'
+    id 'org.springframework.boot' version '2.7.11'
     id "org.flywaydb.flyway" version "8.4.2"
     id "io.freefair.lombok" version "5.3.3.3"
     id 'uk.gov.hmcts.java' version '0.12.39'
@@ -30,7 +30,7 @@ def versions = [
         pitest             : '1.7.4',
         reformLogging      : '6.0.1',
         serenity           : '2.0.76',
-        springBoot         : '2.7.7',
+        springBoot         : '2.7.11',
         restAssured        : '4.3.3',
         jackson            : '2.14.0-rc1',
         launchDarklySdk    : '5.10.7',
@@ -303,7 +303,7 @@ dependencies {
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-data-jpa', version: versions.springBoot
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-security', version: versions.springBoot
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-web', version: versions.springBoot
-    implementation group: 'org.springframework.security', name: 'spring-security-core', version: '5.7.5'
+    implementation group: 'org.springframework.security', name: 'spring-security-core', version: '5.7.8'
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter-cache', version: versions.springBoot
 
     implementation group: 'org.bouncycastle', name: 'bcpkix-jdk15on', version: '1.70'