Description
H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| h2oai | h2oai/h2o-3 | unspecified – ≤ latest | — |
Critical · 9.3
CVE-2023-6013
EUVD-2023-58280GHSA-3g44-f63g-r9p7
H2O Local File Include
Published Nov 16, 2023 · Updated Nov 27, 2024 · Assigned by @huntr_ai