CVE-2019-25075: Improper Neutralization of Input During Web Page Generation

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request...

Gravitee API Management 跨站脚本漏洞

Gravitee API Management is the open source Gravitee API management tool. A security vulnerability exists in Gravitee API Management prior to version 1.25.3, which stems from a combination of HTML injection and path traversal in the email service, allowing an anonymous user to read arbitrary files...

PT-2022-4436

Name of the Vulnerable Software and Affected Versions Gravitee API Management versions prior to 1.25.3 Description The issue is related to HTML injection combined with path traversal in the Email service, allowing anonymous users to read arbitrary files. This can be achieved via a...