CVE-2022-38723

Gravitee API Management before 3.15.13 allows path traversal through HTML injection...

The vulnerability of the Email service of the Gravitee API Management software allows a attacker to perform XSS attacks.

The vulnerability of the Email service of the Gravitee API Management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...