Threats tagged 'ghsa-hxjw-v2v5-hpcr'

A vulnerability in the ESAPI esapi-java-legacy library affects the Encoder.encodeForSQL interface used for SQL Injection defense. This flaw leads to improper neutralization of special elements, potentially allowing remote attackers to exploit it. The issue is classified as problematic with a high severity score of 7.3. The vulnerability has been publicly disclosed, and a fix is available by upgrading to version 2.7.0.0, which disables the vulnerable feature by default and issues warnings when it is used.