CVE-2023-6017: h2o

High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days.

H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL.

Affected products

• h2o h2o: affected versions not specified

Published 2023-11-16. Last modified 2026-06-17.