exploitDog

CVE-2023-33544

Опубликовано: 01 июн. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.

Ссылки

https://github.com/hawtio/hawtio/issues/2832
Exploit
Issue Tracking
Third Party Advisory
https://github.com/hawtio/hawtio/issues/2832
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hawt:hawtio:2.17.2:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00051

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-22

CWE-22

Связанные уязвимости

CVE-2023-33544

CVSS3: 5.5

redhat

больше 2 лет назад

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.

GHSA-p223-c4w6-q454

CVSS3: 5.5

github

больше 2 лет назад

hawtio vulnerable to Path Traversal

EPSS

Процентиль: 16%

0.00051

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-22

CWE-22