CVE-2017-2617: Hawt Hawtio

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed.

Affected products

• Hawt Hawtio: before 1.5.5 (fixed in 1.5.5)

Published 2018-05-22. Last modified 2026-06-17.