by Kastro
Paper/Archive/CVE-2023-6569

CVE-2023-6569

h2oai h2oai/h2o-3 — External Control of File Name or Path in h2oai/h2o-3

EPSS 0.7%public exploitCVSS 9.3
critical.is priorityof 100
49
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 54.0.540 × 2010.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

External Control of File Name or Path in h2oai/h2o-3

Affected

ProductAffectedFixed inSource
h2oai/h2o-3unspecified – latest–CNA

Scores by source

@huntr_ai (CNA)9.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refhuntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3c