CVE-2023-33544

Published: Jun 1, 2023
Updated: May 9, 2024
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2023-33544" target="_blank" rel="noopener"> CVE-2023-33544
GHSA: <a href="https://github.com/advisories/GHSA-p223-c4w6-q454" target="_blank" rel="noopener"> GHSA-p223-c4w6-q454
Severity: Medium
Exploit:

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.