Override logback version to 1.2.13 (#415)

This commit overrides the logback version in order to fix CVE-2023-6378.

See spring-cloud/spring-cloud-dataflow#5593

pom.xml

@@ -61,6 +61,7 @@
 		<spring-boot.version>2.7.18</spring-boot.version>
 		<maven.compiler.source>${java.version}</maven.compiler.source>
 		<maven.compiler.target>${java.version}</maven.compiler.target>
+		<logback.version>1.2.13</logback.version>
 	</properties>
 
 	<modules>
@@ -102,6 +103,22 @@
 				<type>pom</type>
 				<scope>import</scope>
 			</dependency>
+			<!-- Override Logback provided by Spring Boot -->
+			<dependency>
+				<groupId>ch.qos.logback</groupId>
+				<artifactId>logback-core</artifactId>
+				<version>${logback.version}</version>
+			</dependency>
+			<dependency>
+				<groupId>ch.qos.logback</groupId>
+				<artifactId>logback-classic</artifactId>
+				<version>${logback.version}</version>
+			</dependency>
+			<dependency>
+				<groupId>ch.qos.logback</groupId>
+				<artifactId>logback-access</artifactId>
+				<version>${logback.version}</version>
+			</dependency>
 			<dependency>
 				<groupId>org.springframework.boot</groupId>
 				<artifactId>spring-boot-dependencies</artifactId>