Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-25075

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-xc4w-28g8-vqm5

Path Traversal in Gravitee API Management HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

gitlab/maven/io.gravitee.apim/gravitee-api-management/CVE-2019-25075

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.