GHSA-9g8w-pjpr-prr4HighCVSS 7.5

Path Traversal in io.hawt:project

Published
May 13, 2022
Last Modified
February 2, 2023

🔗 CVE IDs covered (1)

CVE-2017-2594 →

📋 Description

hawtio before versions 2.0-beta-1, 2.0-beta-2, 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 are vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.

🎯 Affected products1

  • maven/io.hawt:project:< 1.5.0

🔗 References (4)