Description
Gravitee API Management before 3.15.13 allows path traversal through HTML injection.
Remediation
References
https://community.gravitee.io/t/whats-new-in-access-management-3-15-lts/164
https://gist.github.com/garatc/d86cdb1fa2e35a7ee719d9a0de0b5ca3
Related Vulnerabilities
CVE-2019-10315 Vulnerability in maven package org.jenkins-ci.plugins:github-oauth
CVE-2023-22457 Vulnerability in maven package org.xwiki.contrib:application-ckeditor-ui
CVE-2023-25572 Vulnerability in npm package ra-ui-materialui
CVE-2020-24582 Vulnerability in npm package zulip
CVE-2022-24897 Vulnerability in maven package org.xwiki.commons:xwiki-commons-velocity