Debug logs error

Recently upgraded to the latest version of Lucee on our Windows server.

The debug log viewer is throwing the following error:
Lucee Error (org.owasp.esapi.errors.ConfigurationException)
Message java.lang.ClassNotFoundException: org.opensaml.ESAPISecurityConfig not found by org.lucee.esapi [83] SecurityConfiguration class (org.opensaml.ESAPISecurityConfig) must be in class path.
Stacktrace The Error Occurred in
/admin/debugging.logs.detail.cfm: line 65
called from /admin/debugging.logs.cfm: line 151
called from /admin/web.cfm: line 467

ESAPI owasp extension version:

OS: Windows 2016 Datacenter
Java Version: 1.8.0_251-b08
Tomcat Version: 9.0.26
Lucee Version:

@dman1, Yes, the issue confirmed with the ESAPI extension version But, very first time only it was happened. Could you please check with the latest version of the extension?

For new users who still aren’t very familiar with Lucee and to add a little bit more information to @cfmitrah 's post:

To update the extension log into Lucees Server Admin, click on
Extension => Applications and you’ll see the installed extensions. Click on the installed OWASP ESAPI Extension (it should have a “update me” banner if a newer version is available). There you’ll be able to upgrade and downgrade the extension.

good tip, the latest version is a SNAPSHOT, you need to click that in red with the (2) to see the latest

1 Like

Updated ESAPI to and the issue is still occuring


@dman1, Could you please restart the server and check again and report here back.

Ive just build a new Lucee server from scratch on Win 2019 DC.
Configured system, settings and my application is running fine.
Update ESAPI to 2.2.0-SNAPSHOT, reboot server
Same error is occuring.