org.owasp.esapi:esapi vulnerabilities (Maven)

7 vulnerabilities.

• org.owasp.esapi:esapi Maven Validator.isValidSafeHTML is being deprecated and will be deleted from org.owasp.esapi:esapi in 1 year GHSA-r68h-jhhj-9jvm Fix available No scoreNovember 27, 2023
• org.owasp.esapi:esapi Maven DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998 GHSA-7c2q-5qmr-v76q Fix available 7.5 HighOctober 27, 2023
• org.owasp.esapi:esapi Maven Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file CVE-2022-24891 Public exploitFix available 5.4 MediumApril 27, 2022
• org.owasp.esapi:esapi Maven Path Traversal in ESAPI CVE-2022-23457 Public exploitFix available 7.5 HighApril 25, 2022
• org.owasp.esapi:esapi Maven Padding oracle attacks CVE-2010-3300 Fix available 5.9 MediumJune 22, 2021
• org.owasp.esapi:esapi Maven Missing Cryptographic Step in OWASP Enterprise Security API for Java CVE-2013-5960 Fix available 5.8 MediumSeptember 30, 2013
• org.owasp.esapi:esapi Maven Missing Cryptographic Step in OWASP Enterprise Security API for Java CVE-2013-5679 Fix available 2.6 LowSeptember 30, 2013