CVE-2024-8616CWE-73

Arbitrary File Overwrite in h2oai/h2o-3

High · published March 20, 2025

CVSS v3.0
8.2
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

In h2oai/h2o-3 version 3.46.0, the `/99/Models/{name}/json` endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the `exportModelDetails` function in `ModelsHandler.java`, where the user-controllable `mexport.dir` parameter is used to specify the file path for writing model details. This can lead to overwriting files at arbitrary locations on the host system.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-03-20T10:10Z
EPSS history
Timeline
  • 20 MAR 10:10Z
    Arbitrary File Overwrite in h2oai/h2o-3
    cvelistv5