Lucene search

@huntr_aiCVE-2023-6569

HistoryDec 14, 2023 - 1:15 p.m.

CVE-2023-6569

2023-12-1413:15:55

CWE-610

CWE-73

@huntr_ai

web.nvd.nist.gov

cve-2023-6569

external control

file name

path

h2oai

h2o-3

nvd

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

External Control of File Name or Path in h2oai/h2o-3

Affected configurations

Nvd

Node

h2oh2oMatch3.40.0.4

VendorProductVersionCPE
h2oh2o3.40.0.4cpe:2.3:a:h2o:h2o:3.40.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
h2o	h2o	3.40.0.4	cpe:2.3:a:h2o:h2o:3.40.0.4:::::::*

CNA Affected

[
  {
    "vendor": "h2oai",
    "product": "h2oai/h2o-3",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

References

huntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3c

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

Related for CVE-2023-6569