Authenticated encryption vulnerability in OWASP ESAPI for Java
CVE-2013-5960

Currently unrated

Key Information:

Vendor: Owasp
Status: Enterprise Security Api
Vendor: CVE Published:; 30 September 2013

What is CVE-2013-5960?

The authenticated-encryption feature in the OWASP Enterprise Security API (ESAPI) for Java version 2.x prior to 2.1.0.1 suffers from a vulnerability that allows attackers to manipulate serialized ciphertext. This flaw can enable malicious actors to bypass the intended cryptographic protections, particularly when the cipher mode is configured in a non-default setting. Proper measures and upgrades are essential to mitigate these risks and ensure the security of sensitive data handled by the API.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch