Lucene search

Api Management Security Vulnerabilities

cve

CVE-2019-25075

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

6.1CVSS

6.4AI Score

0.001EPSS

2022-08-23 01:15 AM

1760

cve

CVE-2022-38723

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

8.6CVSS

8.7AI Score

0.002EPSS

2023-01-03 10:15 PM