{"id":"CVE-2022-38723","details":"Gravitee API Management before 3.15.13 allows path traversal through HTML injection.","aliases":["GHSA-vp62-m958-qj8c"],"modified":"2026-08-12T03:51:22.645991152Z","published":"2023-01-03T00:00:00Z","database_specific":{"unresolved_ranges":[{"source":"DESCRIPTION","extracted_events":[{"fixed":"3.15.13"}]}],"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38723.json"},"references":[{"type":"WEB","url":"https://community.gravitee.io/t/whats-new-in-access-management-3-15-lts/164"},{"type":"WEB","url":"https://gist.github.com/garatc/d86cdb1fa2e35a7ee719d9a0de0b5ca3"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38723.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38723"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gravitee-io/gravitee-api-management","events":[{"introduced":"0"},{"fixed":"6679ad998df1d6d9714bcb3cc32a0e6dfcbe24de"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"3.15.3"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:gravitee:api_management:*:*:*:*:*:*:*:*"}}],"versions":["3.15.2","3.15.1","3.15.0","3.13.0","3.12.0","3.11.0","3.10.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-38723.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}]}