PT-2024-37999 · H2O · H2O

Name of the Vulnerable Software and Affected Versions: H2O versions prior to 3.38.0 Description: The H2O machine learning platform uses "Iced" classes to move Java objects around the cluster, which supports the inclusion of serialized Java objects. When a model is deserialized, any class is allow...