Skip to content
OpenAdvisories

Package · Maven

org.owasp.esapi:esapi

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    GHSA-7c2q-5qmr-v76q

    DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998

    ### Impact ESAPI 2.5.2.0 and later addressed the DoS vulnerability described in CVE-2023-24998, which Apache Commons FileUpload 1.5 attempted to remediate. But while writing up a new security bulletin regarding the impact on the affected ESAPI `HTTPUtilities.…

    org.owasp.esapi:esapi Maven
  • High 7.5
    CVE-2022-23457 Public exploit

    Path Traversal in ESAPI

    ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)` may incorrectly treat the test…

    OWASP ESAPI org.owasp.esapi:esapi org.owasp.esapi:esapi libowasp-esapi-java Debian Ubuntu Maven