Skip to content
OpenAdvisories

Product · ESAPI

esapi-java-legacy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-5878 Public exploit

    ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

    A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initia…

    ESAPI esapi-java-legacy libowasp-esapi-java libowasp-esapi-java Debian Ubuntu
  • Medium 5.4
    CVE-2022-24891 Public exploit

    Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file

    ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteUR…

    ESAPI esapi-java-legacy org.owasp.esapi:esapi libowasp-esapi-java Debian Ubuntu Maven