Skip to content
OpenAdvisories

Package · Maven

io.gravitee.apim:gravitee-api-management

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2019-25075

    Path Traversal in Gravitee API Management

    HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

    io.gravitee.apim:gravitee-api-management Maven