Lucene search

K
cvelistMitreCVELIST:CVE-2019-25075
HistoryAug 23, 2022 - 12:53 a.m.

CVE-2019-25075

2022-08-2300:53:58
mitre
www.cve.org
3
html injection
path traversal
gravitee api management
unauthorized access
arbitrary files

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

33.5%

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

33.5%

Related for CVELIST:CVE-2019-25075