CVE-2019-25075

—

CVSS 3.1

6.1 medium

EPSS

<1%p51

Published

Aug 23, 2022 (Aug 23, 2022)

Modified

Jun 17, 2026

Description

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

Vendors: gravitee
Products: api management
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.