CVE-2024-8616: H2O Vulnerable to Arbitrary File Overwrite

March 20, 2025

In h2oai/h2o-3 version 3.46.0, the /99/Models/{name}/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for writing model details. This can lead to overwriting files at arbitrary locations on the host system.

References

github.com/advisories/GHSA-g48v-3p35-88jr
github.com/h2oai/h2o-3
github.com/h2oai/h2o-3/blob/088190f9d0370a02a483fca68d8dc89c996b4f83/h2o-core/src/main/java/water/api/ModelsHandler.java
huntr.com/bounties/aebf69a5-b9b1-4d2f-a8ff-902c11a8c97a
nvd.nist.gov/vuln/detail/CVE-2024-8616

Code Behaviors & Features

Detect and mitigate CVE-2024-8616 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →