External Control of File Name or Path in h2oai/h2o-3
The product allows user input to control or influence paths or file names that are used in filesystem operations.
The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.
Link | Tags |
---|---|
https://huntr.com/bounties/a5d003dc-c23e-4c98-8dcf-35ba9252fa3c | exploit |