https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:51:33 +0000 https://cve.radiocsirt.org/vuln/cve-2022-24891 <p><strong>Affected:</strong> esapi-java-legacy</p> <p>ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for &#34;onsiteURL&#34; in the **antisamy-esapi.xml** configuration file that can cause &#34;javascript:&#34; URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround, manually edit the **antisamy-esapi.xml** configuration files to change the &#34;onsiteURL&#34; regular expression. More information about remediation of the vulnerability, including the workaround, is available in the maintainers&#39; release notes and security bulletin.</p> <p><strong>Affected:</strong> esapi-java-legacy</p> <p>ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for &#34;onsiteURL&#34; in the **antisamy-esapi.xml** configuration file that can cause &#34;javascript:&#34; URLs to fail to be correctly sanitized. This issue is patched in ESAPI 2.3.0.0. As a workaround, manually edit the **antisamy-esapi.xml** configuration files to change the &#34;onsiteURL&#34; regular expression. More information about remediation of the vulnerability, including the workaround, is available in the maintainers&#39; release notes and security bulletin.</p> https://cve.radiocsirt.org/vuln/cve-2022-24891