Withdrawn: this CVE is not a vulnerability
The assigning CNA withdrew CVE-2025-0782 on 16 October 2026, and it carries the Rejected state at CVE.org and NVD. It must not be treated as a live finding. Its pre-withdrawal severity, score and exploitability are withheld below; the record itself is kept because withdrawals are reversible and because the reject reason is the correction worth publishing.
CVE-2025-0782
H2O-3 S3 Bucket Public Write Privilege Escalation Vulnerability
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
INFO
Published Date :
May 2, 2025, 9:15 p.m.
Last Modified :
Oct. 16, 2026, 2:10 p.m.
Remotely Exploit :
—
Source :
[email protected]
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-0782 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-0782 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Translated by [email protected]
Oct. 16, 2026
Action Type Old Value New Value Changed Translation Title: rechazado, Description: Motivo del rechazo: Este ID de CVE ha sido rechazado o retirado por su Autoridad de Numeración de CVE (CNA). Title: rechazado, Description: Motivo del rechazo: Este ID de CVE ha sido rechazado o retirado por su Autoridad de Numeración de CVE (CNA). -
CVE Translated by [email protected]
Oct. 15, 2026
Action Type Old Value New Value Changed Translation Title: h2oai/h2o-3 , Description: Una vulnerabilidad en la configuración del bucket S3 para h2oai/h2o-3 permite acceso público de escritura al bucket "h2o-release". Este problema afecta a todas las versiones y podría permitir a un atacante sobrescribir cualquier archivo del bucket. Al descargar archivos binarios, como JAR, desde este bucket, esta vulnerabilidad podría provocar la ejecución remota de código (RCE) en cualquier usuario que utilice la aplicación. Además, un atacante podría modificar la documentación para incluir enlaces de descarga maliciosos. Title: rechazado, Description: Motivo del rechazo: Este ID de CVE ha sido rechazado o retirado por su Autoridad de Numeración de CVE (CNA). -
CVE Rejected by [email protected]
May. 20, 2025
Action Type Old Value New Value -
CVE Modified by [email protected]
May. 20, 2025
Action Type Old Value New Value Changed Description A vulnerability in the S3 bucket configuration for h2oai/h2o-3 allows public write access to the 'h2o-release' bucket. This issue affects all versions and could enable an attacker to overwrite any file in the bucket. As users download binary files such as JARs from this bucket, this vulnerability could lead to remote code execution (RCE) on any user who uses the application. Additionally, an attacker could modify the documentation to include malicious download links. Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Removed CVSS V3 huntr.dev: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Removed CWE huntr.dev: CWE-862 Removed Reference huntr.dev: https://github.com/h2oai/h2o-3/commit/6740655b70cef40ec67d952bee2d23f7d33c7419 Removed Reference huntr.dev: https://huntr.com/bounties/4587cec7-8bc5-48ab-8614-105d41c99151 Removed Reference CISA-ADP: https://huntr.com/bounties/4587cec7-8bc5-48ab-8614-105d41c99151 -
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
May. 06, 2025
Action Type Old Value New Value Added Reference https://huntr.com/bounties/4587cec7-8bc5-48ab-8614-105d41c99151 -
New CVE Received by [email protected]
May. 02, 2025
Action Type Old Value New Value Added Description A vulnerability in the S3 bucket configuration for h2oai/h2o-3 allows public write access to the 'h2o-release' bucket. This issue affects all versions and could enable an attacker to overwrite any file in the bucket. As users download binary files such as JARs from this bucket, this vulnerability could lead to remote code execution (RCE) on any user who uses the application. Additionally, an attacker could modify the documentation to include malicious download links. Added CVSS V3 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N Added CWE CWE-862 Added Reference https://github.com/h2oai/h2o-3/commit/6740655b70cef40ec67d952bee2d23f7d33c7419 Added Reference https://huntr.com/bounties/4587cec7-8bc5-48ab-8614-105d41c99151