CVE-2024-10553

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10553

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10553.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10553

Aliases

Published

2025-03-20T10:09:04.913Z

Modified

2026-07-22T02:50:47.698352Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Jdbc Deserialization in h2oai/h2o-3

Details

A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitrary code via deserialization of untrusted data. The vulnerability exists in the endpoints POST /99/ImportSQLTable and POST /3/SaveToHiveTable, where user-controlled JDBC URLs are passed to DriverManager.getConnection, leading to deserialization if a MySQL or PostgreSQL driver is available in the classpath. This issue is fixed in version 3.47.0.

Database specific

{
    "cna_assigner": "@huntr_ai",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "fixed": "3.47.0"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-502"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10553.json"
}

References

Affected packages

Git / github.com/h2oai/h2o-3

Affected ranges

Type

GIT

Repo

https://github.com/h2oai/h2o-3

Events

Introduced

a24dd872beb239f3f8921820fc0c4bd9de3f8dd9

Fixed

ac1d642b4d86f10a02d75974055baf2a4b2025ac

Database specific

{
    "cpe": "cpe:2.3:a:h2o:h2o:3.46.0.4:*:*:*:*:*:*:*",
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "3.46.0.4"
        },
        {
            "last_affected": "3.46.0.4"
        }
    ]
}

Affected versions

3.*

3.46.0.4

jenkins-3.*

jenkins-3.46.0.4

jenkins-3.46.0.5

jenkins-rel-3.*

jenkins-rel-3.46.0-4

jenkins-rel-3.46.0-5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10553.json"

vanir_signatures_modified

"2026-07-22T02:50:47Z"

vanir_signatures

[
    {
        "signature_version": "v1",
        "source": "https://github.com/h2oai/h2o-3/commit/ac1d642b4d86f10a02d75974055baf2a4b2025ac",
        "id": "CVE-2024-10553-395c6987",
        "digest": {
            "length": 331.0,
            "function_hash": "168816719982287770981110467877407296836"
        },
        "target": {
            "function": "getConnectionSafe",
            "file": "h2o-core/src/main/java/water/jdbc/SQLManager.java"
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/h2oai/h2o-3/commit/ac1d642b4d86f10a02d75974055baf2a4b2025ac",
        "id": "CVE-2024-10553-4c363082",
        "digest": {
            "length": 607.0,
            "function_hash": "190704215970352568582881088499490350282"
        },
        "target": {
            "function": "importSqlTable",
            "file": "h2o-core/src/main/java/water/jdbc/SQLManager.java"
        },
        "deprecated": false,
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/h2oai/h2o-3/commit/ac1d642b4d86f10a02d75974055baf2a4b2025ac",
        "id": "CVE-2024-10553-72e872a7",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "300451468381251302729133872593402201545",
                "252908786993601715595876974109271588348",
                "10801937721548681594632862534605650681",
                "9423190181843344384806367822050451322",
                "227488768061697099239980640670601215227",
                "316742949932481921682790972830828141023",
                "221747699757561979942663759029883784899",
                "174988231897645054029137978980406567093",
                "338297435257418145061421683743409573372",
                "108724650822201000318550971372101398772",
                "170590909252239114651385301705348166597",
                "203574655414930643365103733016374486186",
                "203372091579464334002843783006599322199",
                "226823000619405657601650876101252911533",
                "211537658870709066147887120523182385619",
                "337506303001316219262103506009455255380",
                "123477289073643657779683900089844838158",
                "116741747136631521503695341896450644192",
                "182520457555272385502724177175461447459",
                "131570643222693320033148107955518213557",
                "209286989575944391901629413543522918514"
            ]
        },
        "target": {
            "file": "h2o-core/src/main/java/water/jdbc/SQLManager.java"
        },
        "deprecated": false,
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "source": "https://github.com/h2oai/h2o-3/commit/ac1d642b4d86f10a02d75974055baf2a4b2025ac",
        "id": "CVE-2024-10553-cd692acb",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "59195090619537486638448282897914155446",
                "24561648639743877178903633622248367680"
            ]
        },
        "target": {
            "file": "h2o-core/src/test/java/water/jdbc/SQLManagerTest.java"
        },
        "deprecated": false,
        "signature_type": "Line"
    }
]