FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

[Snyk] Security upgrade org.owasp.esapi:esapi from 2.2.3.1 to 2.5.3.0 by tyleragypt · Pull Request #19 · tyleragypt/BenchmarkJava · GitHub

/ BenchmarkJava Public
forked from OWASP-Benchmark/BenchmarkJava

[Snyk] Security upgrade org.owasp.esapi:esapi from 2.2.3.1 to 2.5.3.0 - #19

Open
tyleragypt wants to merge 1 commit into
masterfrom
snyk-fix-719c34ae72e19094fe9f96a8ff7fbcc3
ConversationCommits (1)ChecksFiles changed
Open

[Snyk] Security upgrade org.owasp.esapi:esapi from 2.2.3.1 to 2.5.3.0#19
tyleragypt wants to merge 1 commit into
masterfrom
snyk-fix-719c34ae72e19094fe9f96a8ff7fbcc3

Conversation

tyleragypt commented Nov 25, 2023

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `maven` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • pom.xml

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Upgrade Breaking Change Exploit Maturity Reachability
455/1000
Why? Has a fix available, CVSS 6.1		 Cross-site Scripting (XSS)
SNYK-JAVA-ORGOWASPANTISAMY-5950399		 org.owasp.esapi:esapi:
2.2.3.1 -> 2.5.3.0
No No Known Exploit No Path Found

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

tyleragypt commented Nov 25, 2023

Copy link
Copy Markdown
Owner Author


Checkmarx One – Scan Summary & Details – 459feaf8-cd4b-4aa4-8be2-bbf14146a8f0

New Issues

Severity Issue Source File / Package Checkmarx Insight
CVE-2016-10707 Npm-jquery-2.1.4 Vulnerable Package
CVE-2022-41853 Maven-org.hsqldb:hsqldb-2.3.6 Vulnerable Package
CVE-2023-24998 Maven-commons-fileupload:commons-fileupload-1.5 Vulnerable Package
CVE-2007-2379 Npm-jquery-2.1.4 Vulnerable Package
CVE-2014-6071 Npm-jquery-2.1.4 Vulnerable Package
CVE-2015-9251 Npm-jquery-2.1.4 Vulnerable Package
CVE-2019-11358 Npm-jquery-2.1.4 Vulnerable Package
CVE-2020-11022 Npm-jquery-2.1.4 Vulnerable Package
CVE-2020-11023 Npm-jquery-2.1.4 Vulnerable Package
CVE-2023-20861 Maven-org.springframework:spring-expression-4.3.30.RELEASE Vulnerable Package
CVE-2023-20863 Maven-org.springframework:spring-expression-4.3.30.RELEASE Vulnerable Package
CVE-2023-33201 Maven-org.bouncycastle:bcprov-jdk15on-1.70 Vulnerable Package
Cxf0b588a3-5c6f Npm-jquery-2.1.4 Vulnerable Package

Fixed Issues

Severity Issue Source File / Package
CVE-2016-1000031 Maven-commons-fileupload:commons-fileupload-1.3.3
CVE-2019-17571 Maven-log4j:log4j-1.2.17
CVE-2021-4104 Maven-log4j:log4j-1.2.17
CVE-2022-23302 Maven-log4j:log4j-1.2.17
CVE-2022-23305 Maven-log4j:log4j-1.2.17
CVE-2022-23307 Maven-log4j:log4j-1.2.17
CVE-2022-23457 Maven-org.owasp.esapi:esapi-2.2.3.1
CVE-2022-24839 Maven-net.sourceforge.nekohtml:nekohtml-1.9.22
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01444.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01191.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01445.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02612.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01363.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01067.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02512.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00980.java: 59
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01066.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00570.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00309.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01190.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01192.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02070.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00823.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00827.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00495.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01608.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02515.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02516.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02517.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02155.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00982.java: 59
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01442.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02341.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02344.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00825.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01691.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01690.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02613.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01361.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02514.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01288.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00496.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00498.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01287.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00175.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00172.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00173.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00174.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00311.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00306.java: 44
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00740.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02513.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02511.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02518.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00412.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00983.java: 59
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00574.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00573.java: 45
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00497.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00410.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00743.java: 43
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00092.java: 59
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00091.java: 59
Command_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00007.java: 46
Command_Injection /src/main/java/org/owasp/benchmark/helpers/SeparateClassRequest.java: 31
Command_Injection /src/main/java/org/owasp/benchmark/helpers/SeparateClassRequest.java: 31
Command_Injection /src/main/java/org/owasp/benchmark/helpers/SeparateClassRequest.java: 31
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01005.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01883.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00111.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00997.java: 54
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00112.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01008.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01877.java: 54
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01000.java: 54
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01889.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01887.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01890.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01009.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00115.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01880.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01880.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01891.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01007.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00998.java: 54
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00103.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01888.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01002.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01002.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01885.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00108.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00113.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01012.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01879.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01879.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00996.java: 54
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00101.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00101.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01882.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00102.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01011.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00109.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01881.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01003.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01003.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01006.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01004.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01004.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00106.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01010.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00100.java: 53
SQL_Injection /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest00100.java: 53
Absolute_Path_Traversal /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest01155.java: 44
Absolute_Path_Traversal /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02301.java: 45
Absolute_Path_Traversal /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02029.java: 44
Absolute_Path_Traversal /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02557.java: 43
Absolute_Path_Traversal /src/main/java/org/owasp/benchmark/testcode/BenchmarkTest02302.java: 45

More results are available on AST platform

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

Back | FazBrowse Home | New Git URL