CVE-2024-8616

In h2oai/h2o-3 version 3.46.0, the `/99/Models/{name}/json` endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the `exportModelDetails` function in `ModelsHandler.java`, where the user-controllable `mexport.dir` parameter is used to specify the file path for writing model details. This can lead to overwriting files at arbitrary locations on the host system.

• CWE-73

• https://huntr.com/bounties/aebf69a5-b9b1-4d2f-a8ff-902c11a8c97aExploit, Third Party Advisory

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8610A vulnerability classified as problematic has been found in …5.4
• CVE-2024-8611A vulnerability classified as critical was found in itsource…9.8
• CVE-2024-8612A flaw was found in QEMU, in the virtio-scsi, virtio-blk, an…3.8
• CVE-2024-8613A vulnerability in gaizhenbiao/chuanhuchatgpt version 202408…8.8
• CVE-2024-8614The JobSearch WP Job Board plugin for WordPress is vulnerabl…8.8
• CVE-2024-8615The JobSearch WP Job Board plugin for WordPress is vulnerabl…9.8
• CVE-2024-8617The Quiz Maker WordPress plugin before 6.5.9.9 does not sani…4.8
• CVE-2024-8618The Page Builder: Pagelayer WordPress plugin before 1.9.0 d…4.8
• CVE-2024-8619The Ajax Search Lite WordPress plugin before 4.12.3 does no…4.8
• CVE-2024-8620The MapPress Maps for WordPress plugin before 2.93 does not …4.8
• CVE-2024-8621The Daily Prayer Time plugin for WordPress is vulnerable to …6.5
• CVE-2024-8622The amCharts: Charts and Maps plugin for WordPress is vulner…6.1