Vulners
Lucene search
2 matches found
CVE-2022-23457
ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of Validator.getValidDirectoryPathString, String, File, boolean may incorrectly treat the tested input string as a child of the specified...
9.8CVSS0.02674EPSS
Exploits2References6
CVE-2022-23457 Path Traversal in ESAPI
ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of Validator.getValidDirectoryPathString, String, File, boolean may incorrectly treat the tested input string as a child of the specified...
7.5CVSS9.5AI score0.02674EPSS
Exploits2References5
20