An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b | Third Party Advisory Issue Tracking Exploit |
https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b | Third Party Advisory Issue Tracking Exploit |
Configurations
History
28 Jul 2025, 14:04
Type | Values Removed | Values Added |
---|---|---|
First Time |
H2o
H2o h2o |
|
CWE | ||
CPE | cpe:2.3:a:h2o:h2o:3.45.0.6386:*:*:*:*:*:*:* | |
References | () https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6b - Third Party Advisory, Issue Tracking, Exploit |
16 Apr 2024, 13:24
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-16 00:15
Updated : 2025-07-28 14:04
NVD link : CVE-2024-1456
Mitre link : CVE-2024-1456
JSON object : View
Products Affected
h2o
- h2o
CWE
No CWE.