Non évaluée
HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary fil...
CVE-2019-25075
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- package github.com
- web medium.com