hawtio vulnerable to Path Traversal

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-33544 · ADVISORY
• hawtio/hawtio · WEB
• hawtio/hawtio · PACKAGE

io.hawt:project のその他の脆弱性

• CVE-2017-2589緊急 9.0It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies ar…
• CVE-2017-2594高 7.5hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerE…
• CVE-2017-7556高 8.8Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their we…