Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai

CVE-2024-10553Jdbc Deserialization in h2oai/h2o-3

Critical 9.8

In plain English

A critical-severity unsafe deserialization in h2oai/h2o-3 from h2oai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.6% (higher than 76% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.0)9.8Critical

Exploit odds (30 days)1.6%top 24.3% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitrary code via deserialization of untrusted data. The vulnerability exists in the endpoints POST /99/ImportSQLTable and POST /3/SaveToHiveTable, where user-controlled JDBC URLs are passed to DriverManager.getConnection, leading to deserialization if a MySQL or PostgreSQL driver is available in the classpath. This issue is fixed in version 3.47.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Maven	ai.h2o:h2o-core	3.46.0.6	GHSA-h7xg-cmpp-48hf
PyPI	h2o	3.46.0.6	GHSA-h7xg-cmpp-48hf
PyPI	h2o	3.46.0.6	PYSEC-2026-351

Affected products (as reported)

Vendor	Product	Versions
h2oai	h2oai/h2o-3	unspecified – before 3.47.0

Weakness: CWE-502 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References