h2oai h2o-3 JAR Model.java importBinaryModel deserialization

Remote Code Execution in h2oai/h2o-3

h2oai h2o-3 H2 JDBC Driver ImportSQLTable deserialization

h2oai h2o-3 IBMDB2 JDBC Driver ImportSQLTable deserialization

Deserialization Vulnerability in h2oai/h2o-3

A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitrary code via deserialization of untrusted data

A vulnerability, which was classified as critical, has been found in h2oai h2o-3 3.46.0.4

An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature

H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution

In h2oai/h2o-3 version 3.46.0, the `/99/Models/{name}/json` endpoint allows for arbitrary file overwrite on the target server

External Control of File Name or Path in h2oai/h2o-3

h2o has HTTP/2 state amplification

h2o is vulnerable to musl libc stack overflow

h2o: musl libc stack overflow (QPACK)

h2oai h2o-3 ImportFile API PersistNFS.java importFiles information disclosure

A vulnerability in the typeahead endpoint of h2oai/h2o-3 version 3.46.0 allows for a denial of service

A vulnerability in the `/3/ImportFiles` endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of service

In h2oai/h2o-3 version 3.46.0.2, a vulnerability exists where uploading and repeatedly parsing a large GZIP file can cause a denial of service

In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` parser

A vulnerability in the `/3/ParseSetup` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack

A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack

In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the `rapids` component allows the `main` function of any class under the `water.tools` namespace to be called

A Local File Inclusion (LFI) vulnerability exists in the h2o-3 REST API, allowing unauthenticated remote attackers to read arbitrary files on the server with the permissions of…

In h2oai/h2o-3 version 3.46.0, the endpoint for exporting models does not restrict the export location, allowing an attacker to export a model to any file in the server's file…

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL

In h2oai/h2o-3 version 3.46.0, an endpoint exposing a custom EncryptionTool allows an attacker to encrypt any files on the target server with a key of their choosing

h2o is vulnerable to heap overrun

H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack

h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control

In h2oai/h2o-3 version 3.40.0.4, an exposure of sensitive information vulnerability exists due to an arbitrary system path lookup feature