Beveiligingsadvies

CVE-2024-7768

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-20 10:10:48

Laatst bijgewerkt 2025-10-15 12:49:52

Toegewezen door @huntr_ai

CVSS-score 7.5

Status PUBLISHED

Beschrijving

A vulnerability in the `/3/ImportFiles` endpoint of h2oai/h2o-3 version 3.46.1 allows an attacker to cause a denial of service. The endpoint takes a single GET parameter, `path`, which can be recursively set to reference itself. This leads the server to repeatedly call its own endpoint, eventually filling up the request queue and leaving the server unable to handle other requests.

← Alle CVE's bekijken Bekijk op cve.org ↗