CVE-2023-6038 (published 2023-11-16T16:06:43.684Z)
An attacker is able to read any file on the server hosting the H2O dashboard without any authentication.
Affected products: Vendor: h2oai
Product: h2oai/h2o-3
Versions: unspecified