Maven/ai.h2o:h2o-core CVE-2024-8616: high 8.2, EPSS 0.56%
H2O Vulnerable to Arbitrary File Overwrite
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.10.4.1 | - | 3.46.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g48v-3p35-88jr#Maven/ai.h2o:h2o-core
- https://nvd.nist.gov/vuln/detail/CVE-2024-8616
- https://github.com/h2oai/h2o-3
- https://github.com/h2oai/h2o-3/blob/088190f9d0370a02a483fca68d8dc89c996b4f83/h2o-core/src/main/java/water/api/ModelsHandler.java#L310
- https://huntr.com/bounties/aebf69a5-b9b1-4d2f-a8ff-902c11a8c97a
CVE-2024-8616 · published · modified · JSON