CVE-2023-6013: h2o

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack.

Affected products

• h2o h2o: affected versions not specified

Published 2023-11-16. Last modified 2026-06-17.