Executive brief
Path traversal in the OWASP Enterprise Security API
Affected products
- Maven org.owasp.esapi:esapi
Junglewise Threat Intelligence
CVE-2022-23457: Path traversal in the OWASP Enterprise Security API
CVE-2022-23457 · Severity: low · CVSS 3.1 · Published 2022-04-27
Technologies: org.owasp.esapi:esapi (Maven). Vendors: Maven.
Related threats
- Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year
- DoS vulnerabilities persist in ESAPI file uploads despite remediation of
- Missing Cryptographic Step in OWASP Enterprise Security API for Java
- Missing Cryptographic Step in OWASP Enterprise Security API for Java
- Cross-site Scripting in org.owasp.esapi:esapi