CVE-2023-6038 Information

Description

An attacker is able to read any file on the server hosting the H2O dashboard without any authentication.

Reference

https://huntr.com/bounties/380fce33-fec5-49d9-a101-12c972125d8c

Share on: