H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL
The advisory, in context
H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access to post to the ImportSQLTable URI with a JSON document containing a connection_url property with any typical JDBC Connection URL attack payload such as one that uses queryInterceptors.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
Earlier releases through 3.46.0.7 (inclusive)
No fix recorded for this interval.
253 explicitly affected versions
0.1.10, 0.1.11, 0.1.12, 0.1.13, 0.1.14, 0.1.15, 0.1.16, 0.1.17, 0.1.18, 0.1.19, 0.1.20, 0.1.21, 0.1.22, 0.1.23, 0.1.24, 0.1.25, 0.1.3, 0.1.3.1, 0.1.4, 0.1.5, 0.1.6, 0.1.8, 0.1.9, 0.2.3.5, 0.2.3.6, 0.3.0.2, 3.0.0.12, 3.0.0.16, 3.0.0.18, 3.0.0.19, 3.0.0.22, 3.0.0.25, 3.0.0.26, 3.0.0.30, 3.0.0.5, 3.0.0.8, 3.0.1.2, 3.0.1.3, 3.0.1.4, 3.10.0.1, 3.10.0.10, 3.10.0.2, 3.10.0.3, 3.10.0.4, 3.10.0.5, 3.10.0.6, 3.10.0.7, 3.10.0.8, 3.10.0.9, 3.10.1.1, 3.10.1.2, 3.10.2.1, 3.10.2.2, 3.10.3.1, 3.10.3.2, 3.10.3.3, 3.10.3.4, 3.10.3.5, 3.10.3.6, 3.10.4.1, 3.10.4.11, 3.10.4.12, 3.10.4.2, 3.10.4.3, 3.10.4.4, 3.10.4.5, 3.10.4.6, 3.10.4.7, 3.10.4.8, 3.10.4.9, 3.10.5.1, 3.10.5.2, 3.10.5.3, 3.10.5.4, 3.12.0.1, 3.14.0.1, 3.14.0.2, 3.14.0.3, 3.14.0.4, 3.14.0.5, 3.14.0.6, 3.14.0.7, 3.16.0.1, 3.16.0.10, 3.16.0.11, 3.16.0.12, 3.16.0.2, 3.16.0.3, 3.16.0.4, 3.16.0.5, 3.16.0.6, 3.16.0.7, 3.16.0.8, 3.16.0.9, 3.18.0.1, 3.18.0.10, 3.18.0.11, 3.18.0.2, 3.18.0.3, 3.18.0.4, 3.18.0.5, 3.18.0.6, 3.18.0.7, 3.18.0.8, 3.18.0.9, 3.2.0.1, 3.2.0.2, 3.2.0.3, 3.2.0.4, 3.2.0.5, 3.2.0.6, 3.2.0.7, 3.2.0.8, 3.2.0.9, 3.20.0.1, 3.20.0.10, 3.20.0.2, 3.20.0.3, 3.20.0.4, 3.20.0.5, 3.20.0.6, 3.20.0.7, 3.20.0.8, 3.20.0.9, 3.22.0.1, 3.22.0.2, 3.22.0.3, 3.22.0.4, 3.22.0.5, 3.22.1.1, 3.22.1.2, 3.22.1.3, 3.22.1.4, 3.22.1.5, 3.22.1.6, 3.24.0.1, 3.24.0.2, 3.24.0.3, 3.24.0.4, 3.24.0.5, 3.26.0.1, 3.26.0.10, 3.26.0.11, 3.26.0.2, 3.26.0.3, 3.26.0.4, 3.26.0.5, 3.26.0.6, 3.26.0.8, 3.26.0.9, 3.28.0.1, 3.28.0.2, 3.28.0.3, 3.28.0.4, 3.28.1.1, 3.28.1.2, 3.28.1.3, 3.30.0.1, 3.30.0.2, 3.30.0.3, 3.30.0.4, 3.30.0.5, 3.30.0.6, 3.30.0.7, 3.30.1.1, 3.30.1.2, 3.30.1.3, 3.32.0.1, 3.32.0.2, 3.32.0.3, 3.32.0.4, 3.32.0.5, 3.32.1.1, 3.32.1.2, 3.32.1.3, 3.32.1.4, 3.32.1.5, 3.32.1.6, 3.32.1.7, 3.34.0.1, 3.34.0.3, 3.34.0.4, 3.34.0.5, 3.34.0.6, 3.34.0.7, 3.34.0.8, 3.35.0.2, 3.36.0.1, 3.36.0.2, 3.36.0.3, 3.36.0.4, 3.36.1.1, 3.36.1.2, 3.36.1.3, 3.36.1.4, 3.36.1.5, 3.38.0.1, 3.38.0.2, 3.38.0.3, 3.38.0.4, 3.4.0.1, 3.40.0.1, 3.40.0.2, 3.40.0.3, 3.40.0.4, 3.42.0.1, 3.42.0.2, 3.42.0.3, 3.42.0.4, 3.44.0.1, 3.44.0.2, 3.44.0.3, 3.46.0.1, 3.46.0.2, 3.46.0.3, 3.46.0.4, 3.46.0.5, 3.46.0.6, 3.46.0.7, 3.6.0.1, 3.6.0.10, 3.6.0.11, 3.6.0.12, 3.6.0.2, 3.6.0.3, 3.6.0.4, 3.6.0.5, 3.6.0.7, 3.6.0.8, 3.8.0.1, 3.8.0.2, 3.8.0.3, 3.8.0.4, 3.8.0.5, 3.8.0.6, 3.8.1.1, 3.8.1.2, 3.8.1.3, 3.8.1.4, 3.8.2.1, 3.8.2.11, 3.8.2.2, 3.8.2.3, 3.8.2.4, 3.8.2.5, 3.8.2.6, 3.8.2.7, 3.8.2.8, 3.8.2.9, 3.8.3.1, 3.8.3.2, 3.8.3.3, 3.8.3.4
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.46.0.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"0.1.10",
"0.1.11",
"0.1.12",
"0.1.13",
"0.1.14",
"0.1.15",
"0.1.16",
"0.1.17",
"0.1.18",
"0.1.19",
"0.1.20",
"0.1.21",
"0.1.22",
"0.1.23",
"0.1.24",
"0.1.25",
"0.1.3",
"0.1.3.1",
"0.1.4",
"0.1.5",
"0.1.6",
"0.1.8",
"0.1.9",
"0.2.3.5",
"0.2.3.6",
"0.3.0.2",
"3.0.0.12",
"3.0.0.16",
"3.0.0.18",
"3.0.0.19",
"3.0.0.22",
"3.0.0.25",
"3.0.0.26",
"3.0.0.30",
"3.0.0.5",
"3.0.0.8",
"3.0.1.2",
"3.0.1.3",
"3.0.1.4",
"3.10.0.1",
"3.10.0.10",
"3.10.0.2",
"3.10.0.3",
"3.10.0.4",
"3.10.0.5",
"3.10.0.6",
"3.10.0.7",
"3.10.0.8",
"3.10.0.9",
"3.10.1.1",
"3.10.1.2",
"3.10.2.1",
"3.10.2.2",
"3.10.3.1",
"3.10.3.2",
"3.10.3.3",
"3.10.3.4",
"3.10.3.5",
"3.10.3.6",
"3.10.4.1",
"3.10.4.11",
"3.10.4.12",
"3.10.4.2",
"3.10.4.3",
"3.10.4.4",
"3.10.4.5",
"3.10.4.6",
"3.10.4.7",
"3.10.4.8",
"3.10.4.9",
"3.10.5.1",
"3.10.5.2",
"3.10.5.3",
"3.10.5.4",
"3.12.0.1",
"3.14.0.1",
"3.14.0.2",
"3.14.0.3",
"3.14.0.4",
"3.14.0.5",
"3.14.0.6",
"3.14.0.7",
"3.16.0.1",
"3.16.0.10",
"3.16.0.11",
"3.16.0.12",
"3.16.0.2",
"3.16.0.3",
"3.16.0.4",
"3.16.0.5",
"3.16.0.6",
"3.16.0.7",
"3.16.0.8",
"3.16.0.9",
"3.18.0.1",
"3.18.0.10",
"3.18.0.11",
"3.18.0.2",
"3.18.0.3",
"3.18.0.4",
"3.18.0.5",
"3.18.0.6",
"3.18.0.7",
"3.18.0.8",
"3.18.0.9",
"3.2.0.1",
"3.2.0.2",
"3.2.0.3",
"3.2.0.4",
"3.2.0.5",
"3.2.0.6",
"3.2.0.7",
"3.2.0.8",
"3.2.0.9",
"3.20.0.1",
"3.20.0.10",
"3.20.0.2",
"3.20.0.3",
"3.20.0.4",
"3.20.0.5",
"3.20.0.6",
"3.20.0.7",
"3.20.0.8",
"3.20.0.9",
"3.22.0.1",
"3.22.0.2",
"3.22.0.3",
"3.22.0.4",
"3.22.0.5",
"3.22.1.1",
"3.22.1.2",
"3.22.1.3",
"3.22.1.4",
"3.22.1.5",
"3.22.1.6",
"3.24.0.1",
"3.24.0.2",
"3.24.0.3",
"3.24.0.4",
"3.24.0.5",
"3.26.0.1",
"3.26.0.10",
"3.26.0.11",
"3.26.0.2",
"3.26.0.3",
"3.26.0.4",
"3.26.0.5",
"3.26.0.6",
"3.26.0.8",
"3.26.0.9",
"3.28.0.1",
"3.28.0.2",
"3.28.0.3",
"3.28.0.4",
"3.28.1.1",
"3.28.1.2",
"3.28.1.3",
"3.30.0.1",
"3.30.0.2",
"3.30.0.3",
"3.30.0.4",
"3.30.0.5",
"3.30.0.6",
"3.30.0.7",
"3.30.1.1",
"3.30.1.2",
"3.30.1.3",
"3.32.0.1",
"3.32.0.2",
"3.32.0.3",
"3.32.0.4",
"3.32.0.5",
"3.32.1.1",
"3.32.1.2",
"3.32.1.3",
"3.32.1.4",
"3.32.1.5",
"3.32.1.6",
"3.32.1.7",
"3.34.0.1",
"3.34.0.3",
"3.34.0.4",
"3.34.0.5",
"3.34.0.6",
"3.34.0.7",
"3.34.0.8",
"3.35.0.2",
"3.36.0.1",
"3.36.0.2",
"3.36.0.3",
"3.36.0.4",
"3.36.1.1",
"3.36.1.2",
"3.36.1.3",
"3.36.1.4",
"3.36.1.5",
"3.38.0.1",
"3.38.0.2",
"3.38.0.3",
"3.38.0.4",
"3.4.0.1",
"3.40.0.1",
"3.40.0.2",
"3.40.0.3",
"3.40.0.4",
"3.42.0.1",
"3.42.0.2",
"3.42.0.3",
"3.42.0.4",
"3.44.0.1",
"3.44.0.2",
"3.44.0.3",
"3.46.0.1",
"3.46.0.2",
"3.46.0.3",
"3.46.0.4",
"3.46.0.5",
"3.46.0.6",
"3.46.0.7",
"3.6.0.1",
"3.6.0.10",
"3.6.0.11",
"3.6.0.12",
"3.6.0.2",
"3.6.0.3",
"3.6.0.4",
"3.6.0.5",
"3.6.0.7",
"3.6.0.8",
"3.8.0.1",
"3.8.0.2",
"3.8.0.3",
"3.8.0.4",
"3.8.0.5",
"3.8.0.6",
"3.8.1.1",
"3.8.1.2",
"3.8.1.3",
"3.8.1.4",
"3.8.2.1",
"3.8.2.11",
"3.8.2.2",
"3.8.2.3",
"3.8.2.4",
"3.8.2.5",
"3.8.2.6",
"3.8.2.7",
"3.8.2.8",
"3.8.2.9",
"3.8.3.1",
"3.8.3.2",
"3.8.3.3",
"3.8.3.4"
]
}Earlier releases through 3.46.0.7 (inclusive)
No fix recorded for this interval.
118 explicitly affected versions
3.10.0.10, 3.10.0.3, 3.10.0.6, 3.10.0.7, 3.10.0.8, 3.10.3.3, 3.10.3.4, 3.10.4.1, 3.10.4.2, 3.10.4.3, 3.10.4.4, 3.10.4.6, 3.10.4.8, 3.16.0.1, 3.16.0.2, 3.16.0.3, 3.16.0.4, 3.18.0.1, 3.18.0.10, 3.18.0.11, 3.18.0.2, 3.18.0.3, 3.18.0.4, 3.18.0.5, 3.18.0.6, 3.18.0.7, 3.18.0.8, 3.18.0.9, 3.20.0.4, 3.20.0.5, 3.20.0.6, 3.20.0.7, 3.20.0.8, 3.22.0.1, 3.22.0.2, 3.22.0.3, 3.22.0.4, 3.22.0.5, 3.22.1.1, 3.22.1.2, 3.22.1.3, 3.22.1.4, 3.22.1.5, 3.22.1.6, 3.24.0.1, 3.24.0.2, 3.24.0.3, 3.24.0.4, 3.24.0.5, 3.26.0.1, 3.26.0.10, 3.26.0.11, 3.26.0.2, 3.26.0.3, 3.26.0.4, 3.26.0.5, 3.26.0.6, 3.26.0.8, 3.26.0.9, 3.28.0.1, 3.28.0.2, 3.28.0.3, 3.28.1.2, 3.28.1.3, 3.30.0.1, 3.30.0.2, 3.30.0.3, 3.30.0.4, 3.30.0.5, 3.30.0.6, 3.30.0.7, 3.30.1.1, 3.30.1.2, 3.30.1.3, 3.32.0.2, 3.32.0.3, 3.32.0.4, 3.32.0.5, 3.32.1.1, 3.32.1.2, 3.32.1.3, 3.32.1.4, 3.32.1.5, 3.32.1.6, 3.32.1.7, 3.34.0.3, 3.34.0.7, 3.34.0.8, 3.36.0.2, 3.36.0.3, 3.36.0.4, 3.36.1.1, 3.36.1.2, 3.36.1.3, 3.36.1.4, 3.36.1.5, 3.38.0.1, 3.38.0.2, 3.38.0.3, 3.38.0.4, 3.40.0.1, 3.40.0.2, 3.40.0.3, 3.40.0.4, 3.42.0.1, 3.42.0.2, 3.42.0.3, 3.42.0.4, 3.44.0.1, 3.44.0.2, 3.44.0.3, 3.46.0.1, 3.46.0.2, 3.46.0.3, 3.46.0.4, 3.46.0.5, 3.46.0.6, 3.46.0.7
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.46.0.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.10.0.10",
"3.10.0.3",
"3.10.0.6",
"3.10.0.7",
"3.10.0.8",
"3.10.3.3",
"3.10.3.4",
"3.10.4.1",
"3.10.4.2",
"3.10.4.3",
"3.10.4.4",
"3.10.4.6",
"3.10.4.8",
"3.16.0.1",
"3.16.0.2",
"3.16.0.3",
"3.16.0.4",
"3.18.0.1",
"3.18.0.10",
"3.18.0.11",
"3.18.0.2",
"3.18.0.3",
"3.18.0.4",
"3.18.0.5",
"3.18.0.6",
"3.18.0.7",
"3.18.0.8",
"3.18.0.9",
"3.20.0.4",
"3.20.0.5",
"3.20.0.6",
"3.20.0.7",
"3.20.0.8",
"3.22.0.1",
"3.22.0.2",
"3.22.0.3",
"3.22.0.4",
"3.22.0.5",
"3.22.1.1",
"3.22.1.2",
"3.22.1.3",
"3.22.1.4",
"3.22.1.5",
"3.22.1.6",
"3.24.0.1",
"3.24.0.2",
"3.24.0.3",
"3.24.0.4",
"3.24.0.5",
"3.26.0.1",
"3.26.0.10",
"3.26.0.11",
"3.26.0.2",
"3.26.0.3",
"3.26.0.4",
"3.26.0.5",
"3.26.0.6",
"3.26.0.8",
"3.26.0.9",
"3.28.0.1",
"3.28.0.2",
"3.28.0.3",
"3.28.1.2",
"3.28.1.3",
"3.30.0.1",
"3.30.0.2",
"3.30.0.3",
"3.30.0.4",
"3.30.0.5",
"3.30.0.6",
"3.30.0.7",
"3.30.1.1",
"3.30.1.2",
"3.30.1.3",
"3.32.0.2",
"3.32.0.3",
"3.32.0.4",
"3.32.0.5",
"3.32.1.1",
"3.32.1.2",
"3.32.1.3",
"3.32.1.4",
"3.32.1.5",
"3.32.1.6",
"3.32.1.7",
"3.34.0.3",
"3.34.0.7",
"3.34.0.8",
"3.36.0.2",
"3.36.0.3",
"3.36.0.4",
"3.36.1.1",
"3.36.1.2",
"3.36.1.3",
"3.36.1.4",
"3.36.1.5",
"3.38.0.1",
"3.38.0.2",
"3.38.0.3",
"3.38.0.4",
"3.40.0.1",
"3.40.0.2",
"3.40.0.3",
"3.40.0.4",
"3.42.0.1",
"3.42.0.2",
"3.42.0.3",
"3.42.0.4",
"3.44.0.1",
"3.44.0.2",
"3.44.0.3",
"3.46.0.1",
"3.46.0.2",
"3.46.0.3",
"3.46.0.4",
"3.46.0.5",
"3.46.0.6",
"3.46.0.7"
]
}References
- https://nvd.nist.gov/vuln/detail/CVE-2024-45758
- https://github.com/h2oai/h2o-3/issues/16425
- https://github.com/h2oai/h2o-3/issues/16622
- https://github.com/h2oai/h2o-3/pull/16624
- https://github.com/h2oai/h2o-3/commit/f714edd6b8429c7a7211b779b6ec108a95b7382d
- https://gist.github.com/AfterSnows/c24ca3c26dc89ab797e610e92a6a9acb
- https://github.com/h2oai/h2o-3
- https://github.com/pypa/advisory-database/tree/main/vulns/h2o/PYSEC-2026-352.yaml
- https://pypi.org/project/h2o
- https://spear-shield.notion.site/Unauthenticated-Remote-Code-Execution-via-Unrestricted-JDBC-Connection-87a958a4874044199cbb86422d1f6068