Package · Maven

io.gravitee.apim:gravitee-api-management

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.6

CVE-2022-38723

Gravitee API Management contains Path Traversal

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

io.gravitee.apim:gravitee-api-management Maven

Jan 3, 2023
Medium 6.1

CVE-2019-25075

Path Traversal in Gravitee API Management

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

io.gravitee.apim:gravitee-api-management Maven

Aug 23, 2022