Maven/org.owasp.esapi:esapi CVE-2013-5679: low, EPSS 2.43%
Missing Cryptographic Step in OWASP Enterprise Security API for Java
Action: Upgrade org.owasp.esapi:esapi to 2.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.0 | - |
Fixed versions
| 2.1.0 |
Sources
- osv: GHSA-jcp9-796g-pv9p
- https://nvd.nist.gov/vuln/detail/CVE-2013-5679
- https://github.com/ESAPI/esapi-java-legacy/commit/41138fef5f63d9cf0d5e05d2bee2c7f682ffef3f
- https://github.com/ESAPI/esapi-java-legacy
- http://code.google.com/p/owasp-esapi-java/issues/detail?id=306
- http://lists.owasp.org/pipermail/esapi-dev/2013-August/002285.html
- http://owasp-esapi-java.googlecode.com/svn/trunk/documentation/ESAPI-security-bulletin1.pdf
CVE-2013-5679 · published · modified · JSON