OWASP ESAPI vulnerabilities
We track 1 vulnerability in OWASP ESAPI products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 25, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest OWASP ESAPI vulnerabilities
- 9.8 Critical severity
org.owasp.esapi:esapi: Improper Limitation of a Pathname to a Restricted Directory
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)` may incorrectly treat the teste