Security Advisory

CVE-2019-25075

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-23 00:53:58

Last updated 2024-08-05 03:00:19

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

← Browse all CVEs View on cve.org ↗