Description
Gravitee API Management before 3.15.13 allows path traversal through HTML injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.gravitee.apim:gravitee-api-management | < 3.15.13 | 3.15.13 | GHSA-vp62-m958-qj8c |
High · 8.6
CVE-2022-38723
EUVD-2023-0563GHSA-vp62-m958-qj8c
Gravitee API Management contains Path Traversal
Published Jan 3, 2023 · Updated Apr 10, 2025 · Assigned by mitre