CVE-2014-0120

Mô tả

Tham khảo

• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• hawtio/hawtio commit b4e23e0 · Issue Tracking
• infocon.org/cons/SyScan/SyScan%202015%20Singapore/SyScan%202015%20Singapore%20presentations/SyScan15%20David%20Jorm%20-%20Finding%20and%20exploiting%20novel%20flaws%20in%20Java%20software.pdf · Issue Tracking

Lỗ hổng khác của hawtio

• CVE-2023-33544TRUNG BÌNH 5.5hawtio 2.17.2 is vulnerable to Path Traversal. it is possible to input malicious zip files, which can result in the high-risk files after de…
• CVE-2019-9827NGHIÊM TRỌNG 9.8Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitra…
• CVE-2017-2589NGHIÊM TRỌNG 9.0It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies ar…
• CVE-2017-2617CAO 7.8hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a cra…
• CVE-2017-2594CAO 7.5hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerE…