ZeroHour

Vulnerabilities

2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2022-38723
Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

NVD description · AI analysis pending
8.6<1%
  • gravitee api management
CVE-2019-25075
HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /

HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read arbitrary files via a /management/users/register request.

NVD description · AI analysis pending
6.1<1%
  • gravitee api management