Security Advisory

CVE-2019-25075

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-23 00:53:58

Last updated 2024-08-05 03:00:19

Assigner mitre

State PUBLISHED

Description

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

← Browse all CVEs View on cve.org ↗