NetSight
medium5.5

CVE-2023-33544

hawtio 2.17.2 is vulnerable to Path Traversal.

Impact

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.

Affected products

VendorProductAffected versions
HawtHawtio
Version 2.17.2

Weakness classification

References