CVE-2023-6017

H2O S3 Bucket Takeover

High · published November 16, 2023

CVSS v3.0
8.7
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.

The record
Technical detail
CVSS v3.0
8.7 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00855 · 57.9th percentile
Published
2023-11-16T16:07Z
EPSS history
Timeline
  • 16 NOV 16:07Z
    H2O S3 Bucket Takeover
    cvelistv5