Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.hawt:project

4 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2023-33544Medium 5.5

    hawtio 2.17.2 is vulnerable to Path Traversal.

    Affected: through 2.17.2.

  • It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies…

    Affected: fixed in 1.5.0.

  • CVE-2017-2594Medium 5.4

    hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a…

    Affected: fixed in 1.5.0.

  • Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their…

    Affected: fixed in 1.5.4.