Search CVE reports
1 – 3 of 3 results
Some fixes available 5 of 7
A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special...
1 affected package
libowasp-esapi-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| libowasp-esapi-java | Fixed | Fixed | Fixed | Fixed |
Some fixes available 4 of 5
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect...
1 affected package
libowasp-esapi-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| libowasp-esapi-java | Not affected | Fixed | Fixed | Fixed |
Some fixes available 4 of 5
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)`...
1 affected package
libowasp-esapi-java
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|
| libowasp-esapi-java | Not affected | Fixed | Fixed | Fixed |