CVE-2019-25075

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a…

published August 23, 2022

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00723 · 53.5th percentile
Published
2022-08-23T00:53Z
EPSS history
Timeline
  • 23 AUG 00:53Z
    HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a…
    cvelistv5