CVE-2024-1456

An S3 bucket takeover vulnerability was identified in the h2oai/h2o-3 repository. The issue involves the S3 bucket 'http://s3.amazonaws.com/h2o-training', which was found to be vulnerable to unauthorized takeover.

• CWE-840

• https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6bExploit, Issue Tracking, Third Party Advisory
• https://huntr.com/bounties/7c1b7f27-52f3-4b4b-9d81-e277f5e0ab6bExploit, Issue Tracking, Third Party Advisory

Published

Apr 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1450The Shariff Wrapper plugin for WordPress is vulnerable to St…5.4
• CVE-2024-1451An issue has been discovered in GitLab CE/EE affecting all v…8.7
• CVE-2024-1452The GenerateBlocks plugin for WordPress is vulnerable to Sen…4.3
• CVE-2024-1453 In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user…7.8
• CVE-2024-1454The use-after-free vulnerability was found in the AuthentIC …3.4
• CVE-2024-1455A vulnerability in the langchain-ai/langchain repository all…5.9
• CVE-2024-1457Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-1458The Elementor Addons by Livemesh plugin for WordPress is vul…5.4
• CVE-2024-1459A path traversal vulnerability was found in Undertow. This i…5.3
• CVE-2024-1460MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memor…4.4
• CVE-2024-1461The Elementor Addons by Livemesh plugin for WordPress is vul…5.4
• CVE-2024-1462The Maintenance Page plugin for WordPress is vulnerable to B…5.3