PT-2023-13640 · Unknown · Gravitee Api Management

Published 2023-01-03 · Updated 2023-01-23 · CVE-2022-38723

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gravitee API Management versions prior to 3.15.13

Description The issue allows path traversal through HTML injection, potentially enabling anonymous users to read arbitrary files. This is achieved by combining HTML injection with path traversal in the Email service. Specifically, a request to the /management/users/register endpoint can be exploited. A previous patch published in 2019 did not fully resolve the issue, which was later addressed in version 3.15.13.

Recommendations For versions prior to 3.15.13, update to version 3.15.13 to resolve the issue. As a temporary workaround, consider restricting access to the Email service and the /management/users/register endpoint to minimize the risk of exploitation.

Fix

XSS

Path traversal

Weakness Enumeration

CWE-79

CWE-22

Related Identifiers

CVE-2022-38723

GHSA-VP62-M958-QJ8C

Affected Products

Gravitee Api Management

References · 8

• https://community.gravitee.io/t/whats-new-in-access-management-3-15-lts/164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38723 · Security Note
• https://osv.dev/vulnerability/GHSA-vp62-m958-qj8c · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-38723 · Vendor Advisory
• https://github.com/gravitee-io/gravitee-api-management · Note
• https://gist.github.com/garatc/d86cdb1fa2e35a7ee719d9a0de0b5ca3 · Note
• https://t.me/cvenotify/41715 · Telegram Post
• https://github.com/advisories/GHSA-xc4w-28g8-vqm5 · Note