External Control of File Name or Path in h2oai/h2o-3
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3c | Exploit |
Configurations
History
18 Dec 2023, 20:14
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.2 |
| References | () https://huntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3c - Exploit | |
| First Time |
H2o
H2o h2o |
|
| CWE | CWE-610 | |
| CPE | cpe:2.3:a:h2o:h2o:3.40.0.4:*:*:*:*:*:*:* |
14 Dec 2023, 13:51
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-14 13:15
Updated : 2023-12-18 20:14
NVD link : CVE-2023-6569
Mitre link : CVE-2023-6569
JSON object : View
Products Affected
h2o
- h2o
CWE
CWE-610
Externally Controlled Reference to a Resource in Another Sphere
