Live › vulnerability › CVE-2024-45758
Go to dashboardH2O.ai H2O lets an attacker set an arbitrary JDBC connection URL through the ImportSQLTable endpoint. A crafted URL such as one using queryInterceptors can trigger deserialization, file reads and command execution on the server.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:27 UTC, 0h before NVD. All times on this page are UTC.
Teams running H2O-3 servers that accept requests to the ImportSQLTable endpoint, which is exposed on the H2O REST API. Exposure depends on whether untrusted users can reach that endpoint; servers reachable only from trusted internal networks with no untrusted users are lower risk. unknown whether a default configuration restricts this endpoint.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ai.h2o:h2o-core | maven | <= 3.46.0.7 | – |
| h2o | pypi | <= 3.46.0.7 | – |
| h2o | vendor | <= 3.46.0.4 | – |
pip show h2o or inspect the ai.h2o:h2o-core Maven dependency; versions through 3.46.0.4 are described as affected, and the advisory lists 3.46.0.7 as affected through the range.h2o (PyPI) and ai.h2o:h2o-core (Maven) to a version newer than 3.46.0.7; the fixed version is unknown from the sources.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access to post to the ImportSQLTable URI with a JSON document containing a connection_url property with any typical JDBC Connection URL attack payload such as one that uses queryInterceptors.
This page as .md · .json · in your agent: get_signal("CVE-2024-45758")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.