Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/07/01 11:22 a.m.6 views

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS7.5AI score0.004EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/06/29 11:11 a.m.3 views

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS7.6AI score0.004EPSS
Exploits1References9
Cvelist
Cvelist
added 2025/06/29 11:11 a.m.17 views

CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS0.004EPSS
Exploits1References9
CVE
CVE
added 2025/06/29 11:11 a.m.58 views

CVE-2025-5878

CVE-2025-5878 affects the ESAPI Java legacy library, specifically the Encoder.encodeForSQL function in the SQL Injection Defense. The vulnerability arises from improper neutralization of special elements, enabling a remote attacker to exploit SQL injection. Public proof-of-concept exploits exist....

7.5CVSS7.6AI score0.004EPSS
Exploits1References10
Debian CVE
Debian CVE
added 2025/06/29 11:11 a.m.5 views

CVE-2025-5878

A vulnerability was found in ESAPI esapi-java-legacy and classified as problematic. This issue affects the interface Encoder.encodeForSQL of the SQL Injection Defense. An attack leads to an improper neutralization of special elements. The attack may be initiated remotely and an exploit has been...

7.5CVSS6.8AI score0.004EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2025/06/29 12:0 a.m.8 views

PT-2025-27359

Name of the Vulnerable Software and Affected Versions: ESAPI esapi-java-legacy versions prior to 2.7.0.0 Description: A vulnerability was found in the interface Encoder.encodeForSQL of the SQL Injection Defense, leading to an improper neutralization of special elements. The attack may be initiate...

9.8CVSS6.6AI score0.02674EPSS
Exploits4References26
Rows per page
Query Builder