Lucene search
HistoryJan 03, 2023 - 10:15 p.m.
CVE-2022-38723
gravitee api management
path traversal
html injection
cve-2022-38723
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
53.2%
Gravitee API Management before 3.15.13 allows path traversal through HTML injection.
Affected configurations
Node
graviteeapi_managementRange<3.15.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| gravitee | api_management | * | cpe:2.3:a:gravitee:api_management:*:*:*:*:*:*:*:* |
Related
osv
osv
CVE-2022-38723
2023-01-03 22:15:11
Gravitee API Management contains Path Traversal
2023-01-04 00:30:26
cvelist
cvelist
CVE-2022-38723
2023-01-03 00:00:00
cve
cve
CVE-2022-38723
2023-01-03 22:15:11
prion
prion
Path traversal
2023-01-03 22:15:00
veracode
veracode
Directory Traversal
2023-01-13 07:32:46
github
github
Gravitee API Management contains Path Traversal
2023-01-04 00:30:26
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
AI Score
8.8
Confidence
High
EPSS
0.002
Percentile
53.2%
Related for NVD:CVE-2022-38723