PT-2025-12240 · H2O.Ai · H2O-3

Published 2025-03-20 · Updated 2025-03-20 · CVE-2024-8616

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0

Description The issue arises from the /99/Models/{name}/json endpoint, which allows for arbitrary file overwrite on the target server. This is due to the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for writing model details, potentially leading to overwriting files at arbitrary locations on the host system.

Recommendations For version 3.46.0, consider disabling the exportModelDetails function in ModelsHandler.java as a temporary workaround to prevent arbitrary file overwrite until a patch is available. Restrict access to the /99/Models/{name}/json endpoint to minimize the risk of exploitation. Avoid using the mexport.dir parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2024-8616

GHSA-G48V-3P35-88JR

Affected Products

H2O-3

References · 7

• 🔥 https://huntr.com/bounties/aebf69a5-b9b1-4d2f-a8ff-902c11a8c97a · Exploit
• https://osv.dev/vulnerability/GHSA-g48v-3p35-88jr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-8616 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8616 · Security Note
• https://github.com/h2oai/h2o-3 · Note
• https://github.com/h2oai/h2o-3/blob/088190f9d0370a02a483fca68d8dc89c996b4f83/h2o-core/src/main/java/water/api/ModelsHandler.java#L310 · Note
• https://twitter.com/CVEnew/status/1902671131330662474 · Twitter Post