HTML injection combined with path traversal in the Email service in Gravitee API Management prior to 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gravitee api management |