CVE-2023-6569: External Control of File Name or Path in h2oai/h2o-3
External Control of File Name or Path in h2oai/h2o-3
Other sources
Remote unauthenticated attackers can overwrite arbitrary server files with attacker-controllable data. The data that the attacker can control is not entirely arbitrary. h2o writes a CSV/XLS/etc file to disk, so the attacker data is wrapped in quotations and starts with "C1", if they're exporting as CSV.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6569?
CVE-2023-6569 is considered a high-severity vulnerability due to the potential for unauthorized file overwrites.
How do I fix CVE-2023-6569?
To fix CVE-2023-6569, upgrade the h2o package to version 3.44.0.3 or later, or implement access controls to restrict file overwriting permissions.
Who is affected by CVE-2023-6569?
Users of h2o versions up to and including 3.44.0.2 and h2o version 3.40.0.4 are affected by CVE-2023-6569.
What kind of attacks can CVE-2023-6569 facilitate?
CVE-2023-6569 can facilitate remote unauthenticated attacks that allow attackers to overwrite arbitrary server files.
What types of files are involved in CVE-2023-6569?
CVE-2023-6569 can involve overwriting files such as CSV and XLS that are written to disk by the h2o application.