CVE-2022-38723: Gravitee API Management

High severity, CVSS 8.6. EPSS: 0.8% chance of exploitation in the next 30 days.

Gravitee API Management before 3.15.13 allows path traversal through HTML injection.

Affected products

• Gravitee API Management: before 3.15.3 (fixed in 3.15.3)

Published 2023-01-03. Last modified 2026-06-17.