CVE-2023-33544
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk22th percentile - higher than 22% of all known CVEs
Summary
Hawtio version 2.17.2 is vulnerable to Path Traversal. It is possible to input malicious zip files, which can result in high-risk files being stored in any location, even leading to file overwrite.
Risk Assessment
An attacker could exploit this vulnerability to place malicious files in unauthorized locations, posing a serious threat to data integrity within the system.
Recommendation
It is recommended to upgrade to the latest version of Hawtio and implement safeguards against the introduction of malicious zip files.
Original NVD description (English source)
hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.