CVE:CVE-2022-23457
CNNVD:CNNVD-202204-4378
OWASP ESAPI是一个免费的、开源的、Web 应用程序安全控制库，使程序员可以更轻松地编写风险较低的应用程序。
ESAPI 2.3.0.0之前版本存在路径遍历漏洞，该漏洞源于Validator.getValidDirectoryPath(String, String, File, boolean)的默认实现可能会错误地将测试的输入字符串视为指定父目录的子目录。
solution:Upgrade owasp enterprise_security_api to a higher version than 2.3.0.0,and avoid the version (,2.3.0.0); Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -