{"action":"Upgrade org.owasp.esapi:esapi to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"2.0.0"}],"component":"org.owasp.esapi:esapi","cve_ids":["CVE-2013-5679"],"ecosystem":"Maven","epss":0.02426,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-jcp9-796g-pv9p","id":"tcs_01M5N92KQ7ZZ3983NVAWT92E69","modified_at":"2024-11-28T05:31:54.561602Z","published_at":"2022-05-17T03:56:06Z","references":["https://osv.dev/vulnerability/GHSA-jcp9-796g-pv9p","https://nvd.nist.gov/vuln/detail/CVE-2013-5679","https://github.com/ESAPI/esapi-java-legacy/commit/41138fef5f63d9cf0d5e05d2bee2c7f682ffef3f","https://github.com/ESAPI/esapi-java-legacy","http://code.google.com/p/owasp-esapi-java/issues/detail?id=306","http://lists.owasp.org/pipermail/esapi-dev/2013-August/002285.html","http://owasp-esapi-java.googlecode.com/svn/trunk/documentation/ESAPI-security-bulletin1.pdf"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-jcp9-796g-pv9p","url":"https://osv.dev/vulnerability/GHSA-jcp9-796g-pv9p"}],"summary":"Missing Cryptographic Step in OWASP Enterprise Security API for Java"}