CVE-2022-38723: Path Traversal
Published Jan 3, 2023
·Updated
Gravitee API Management before 3.15.13 allows path traversal through HTML injection.
Affected Software
1 affected component
Gravitee API Management<3.15.3
Event History
Jan 3, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-38723?
CVE-2022-38723 is classified as a medium severity vulnerability.
2
How do I fix CVE-2022-38723?
To fix CVE-2022-38723, upgrade Gravitee API Management to version 3.15.13 or later.
3
What type of attack does CVE-2022-38723 enable?
CVE-2022-38723 allows path traversal through HTML injection, potentially exposing sensitive files.
4
Which versions of Gravitee API Management are affected by CVE-2022-38723?
Gravitee API Management versions before 3.15.13 are affected by CVE-2022-38723.
5
Is there a workaround for CVE-2022-38723 if I can't update?
There are no known workarounds for CVE-2022-38723; updating is recommended.