Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-1456

S3 Bucket Takeover in h2oai/h2o-3

Description

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

h2oai h2oai/h2o-3

  • unspecified to ≤ latestaffected

References