https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T21:06:50.358476+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-228429 EUVD-2026-228429 2026-10-17T21:06:50.361071+00:00 EUVD-2026-228429 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38723 fkie_cve-2022-38723 2026-10-17T21:06:50.361103+00:00

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

 https://cve.radiocsirt.org/vuln/ghsa-vp62-m958-qj8c GHSA-vp62-m958-qj8c — Gravitee API Management contains Path Traversal 2026-10-17T21:06:50.361132+00:00

Affected: Maven: io.gravitee.apim:gravitee-api-management

**This CVE addresses the partial fix for CVE-2019-25075**

Gravitee API Management before 3.15.13 allows path traversal through HTML injection. A certain HTML injection combined with path traversal in the Email service in Gravitee API Management before 3.15.13 allows anonymous users to read arbitrary files via a /management/users/register request.

A patch was published in 2019 for this vulnerability but did not appear to have solved the issue. Version 3.15.13 did remove the flaw.

 https://cve.radiocsirt.org/vuln/gsd-2022-38723 gsd-2022-38723 2026-10-17T21:06:50.361158+00:00 gsd-2022-38723