org.owasp.esapi:esapi vulnerabilities
1 known vulnerability in org.owasp.esapi:esapi from OWASP ESAPI. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
org.owasp.esapi:esapi: Improper Limitation of a Pathname to a Restricted Directory
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(String, String, File, boolean)` may incorrectly treat the teste