2021-06-22 11:56:27
redhat
PUBLISHED
It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.