gravitee-io/gravitee-api-management

gravitee-io/gravitee-api-management

GitHubGitHub
GitHubgithub.com
www.gravitee.iowww.gravitee.io
Releases825
Frequency4 days 17 hours
Last Release
Stars421
Gravitee.io - OpenSource API Management
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2019-25075↗
6.1 MEDIUM—

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.