CVE-2023-33544

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p23

Published

Jun 1, 2023 (Jun 1, 2023)

Modified

Jun 17, 2026

Description

hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after decompression being stored in any location, even leading to file overwrite.

Vendors: hawt
Products: hawtio
Weakness: CWE-22
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.