https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T22:55:37.522915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-05300 bdu:2022-05300 2026-10-17T22:55:37.542211+00:00 bdu:2022-05300 https://cve.radiocsirt.org/vuln/euvd-2026-60430 EUVD-2026-60430 2026-10-17T22:55:37.542274+00:00 EUVD-2026-60430 https://cve.radiocsirt.org/vuln/fkie_cve-2019-25075 fkie_cve-2019-25075 2026-10-17T22:55:37.542294+00:00

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

 https://cve.radiocsirt.org/vuln/ghsa-xc4w-28g8-vqm5 GHSA-xc4w-28g8-vqm5 — Path Traversal in Gravitee API Management 2026-10-17T22:55:37.542346+00:00

Affected: Maven: io.gravitee.apim:gravitee-api-management

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

 https://cve.radiocsirt.org/vuln/gsd-2019-25075 gsd-2019-25075 2026-10-17T22:55:37.542388+00:00 gsd-2019-25075