Unrated
HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary fil...
CVE-2019-25075
First seen on SecPulse
Original description The description as published by the source.
HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- package github.com
- web medium.com