Exploit for Path Traversal in Owasp Enterprise_Security_Api

🗓️ 17 Feb 2026 16:23:20Reported by andikahilmyType

githubexploit

githubexploit🔗 github.com👁 180 Views

Exploit for path traversal in OWASP Enterprise Security API Java legacy.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities	20 Jun 202308:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
BDU FSTEC	The vulnerability of the `Validator.getValidDirectoryPath(String, String, File, boolean)` function in the web application security management library ESAPI (OWASP Enterprise Security API) allows a attacker to execute arbitrary code.	13 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-23457	26 Apr 202200:36	–	circl
CNNVD	OWASP ESAPI 路径遍历漏洞	25 Apr 202200:00	–	cnnvd
CVE	CVE-2022-23457	25 Apr 202200:00	–	cve
Cvelist	CVE-2022-23457 Path Traversal in ESAPI	25 Apr 202200:00	–	cvelist
Debian	[SECURITY] [DLA 4246-1] libowasp-esapi-java security update	22 Jul 202501:10	–	debian
Debian CVE	CVE-2022-23457	25 Apr 202200:00	–	debiancve

17 Feb 2026 16:25Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.5

CVSS 3.17.5 - 9.8

EPSS0.02674

SSVC

path traversal enterprise security api java legacy