Owasp Esapi Org.Owasp.Esapi Esapi vulnerabilities

1 known vulnerability affecting owasp_esapi/org.owasp.esapi_esapi.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-23457CRITICALCVSS 9.8≥ 2.3.0.0, < 2.3.0.02022-04-25

CVE-2022-23457 [CRITICAL] CWE-22 CVE-2022-23457: ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control l ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)` may incorrectly treat the tested input string as a child of the specified parent directory. This potentially could allow