CVE-2023-33544
No fix known EPSS <1%CVSS 5.5
hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.
Products: hawtio
Affected upstream, no fix yet
| Ecosystem | Package |
|---|---|
| Maven | io.hawt:project |