CVE:CVE-2022-24891
CNNVD:CNNVD-202204-4523
OWASP ESAPI是一个免费的、开源的、Web 应用程序安全控制库，使程序员可以更轻松地编写风险较低的应用程序。
OWASP ESAPI（OWASP Enterprise Security API）2.3.0.0 之前版本存在安全漏洞，该漏洞源于antisamy-esapi.xml 配置文件中的“onsiteURL”正则表达式不正确，可能导致“javascript:”URL未能正确清理。
solution:Upgrade owasp enterprise_security_api to a higher version than 2.3.0.0,and avoid the version (,2.3.0.0); Upgrade oracle weblogic_server to a higher version than 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -