Path Traversal

2022-08-2309:15:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

path traversal

gravitee-gateway-core

dynamic routing checks

selectuserdefinedendpoint

targetendpointresolver.java

arbitrary files

request

software security

EPSS

0.001

Percentile

33.5%

JSON

gravitee-gateway-core is vulnerable to path traversal. The vulnerability exists due to the lack of dynamic routing checks in the selectUserDefinedEndpoint function of TargetEndpointResolver.java, allowing an attacker to read arbitrary files outside the expected directory via a /management/users/register request.