CVE-2023-33544
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jun 1, 2023
Updated: Jan 9, 2025
CWE ID 22
Summary
CVE-2023-33544 is a newly disclosed vulnerability affecting hawtio version 2.17.2. This issue involves a Path Traversal vulnerability, allowing an attacker to supply malicious zip files as input. Upon decomposition, high-risk files can be stored in any desired location, potentially leading to file overwrites. This vulnerability poses a significant risk and should be addressed promptly by updating to a patched version of hawtio.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.