H2O ImportFiles - Local File Inclusion (CVE-2023-6038)

An attacker is able to read any file on the server hosting the H2O dashboard without any authentication.攻击者能够在无需任何身份验证的情况下，读取托管 H2O 仪表板的任何服务器上的文件。