writeups.xyz / Multiple vulnerabilities in H2O ≤ 3.32.1.3

Submitter : c2a

Date: 23 November 2022

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE
• Arbitrary File Read
• Security Code Review

Programs :

• H2O

Authors :

• Clément Amic (@Loadlow)
• Lena David

Link :
https://www.synacktiv.com/sites/default/files/2022-11/h2o_multiple_vulnerabilities.pdf