https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 21:08:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-228429 EUVD-2026-228429 https://cve.radiocsirt.org/vuln/euvd-2026-228429 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38723 <p>Gravitee API Management before 3.15.13 allows path traversal through HTML injection.</p> <p>Gravitee API Management before 3.15.13 allows path traversal through HTML injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38723 https://cve.radiocsirt.org/vuln/ghsa-vp62-m958-qj8c <p><strong>Affected:</strong> Maven: io.gravitee.apim:gravitee-api-management</p> <p>**This CVE addresses the partial fix for CVE-2019-25075**</p> <p>Gravitee API Management before 3.15.13 allows path traversal through HTML injection. A certain HTML injection combined with path traversal in the Email service in Gravitee API Management before 3.15.13 allows anonymous users to read arbitrary files via a /management/users/register request.</p> <p>A patch was published in 2019 for this vulnerability but did not appear to have solved the issue. Version 3.15.13 did remove the flaw.</p> <p><strong>Affected:</strong> Maven: io.gravitee.apim:gravitee-api-management</p> <p>**This CVE addresses the partial fix for CVE-2019-25075**</p> <p>Gravitee API Management before 3.15.13 allows path traversal through HTML injection. A certain HTML injection combined with path traversal in the Email service in Gravitee API Management before 3.15.13 allows anonymous users to read arbitrary files via a /management/users/register request.</p> <p>A patch was published in 2019 for this vulnerability but did not appear to have solved the issue. Version 3.15.13 did remove the flaw.</p> https://cve.radiocsirt.org/vuln/ghsa-vp62-m958-qj8c https://cve.radiocsirt.org/vuln/gsd-2022-38723 gsd-2022-38723 https://cve.radiocsirt.org/vuln/gsd-2022-38723