CVE-2023-6016 (published 2023-11-16T16:06:24.520Z)
An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import feature.
Affected products: Vendor: h2oai
Product: h2oai/h2o-3
Versions: unspecified