logo

Database

Lack of data validation - Path Traversal In org.owasp.esapi:esapi

Description

MAC Bypass in Symmetric Encryption

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2013-59792. NVD-2013-59793. OSV-2013-59794. GCVE-2013-5979

References

1. http://blog.h3xstream.com/2013/08/esapi-when-authenticated-encryption.html2. http://owasp-esapi-java.googlecode.com/svn/trunk/documentation/ESAPI-security-bulletin1.pdf3. http://www.synacktiv.com/ressources/synacktiv_owasp_esapi_hmac_bypass.pdf4. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-56795. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5979.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.