GitHub Advisoryadvisory · Maven

GHSA-p223-c4w6-q454 hawtio vulnerable to Path Traversal

MEDIUM Published 2023-06-01 Modified 2023-06-08 Official page ↗
Aliases
CVE-2023-33544
Ecosystem
Maven
Packages
io.hawt:project
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-22
Reviewed
2023-06-06

Affected packages

• Maven io.hawt:project: <= 2.17.2 (no fix yet)

Description

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.

Related

Alias · CVE (1)

  • CVE-2023-33544 hawtio 2.17.2 is vulnerable to Path Traversal. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References