9.8
Critique
CVE-2023-51388 Hertzbeat is a real-time monitoring system
Description
Hertzbeat is a real-time monitoring system. In `CalculateAlarm.java`, `AviatorEvaluator` is used to directly execute the expression function, and no security policy is configured, resulting in AviatorScript (which can execute any static method by default) script injection. Version 1.4.1 fixes this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| hertzbeat 1.4 | premières → < 1.4.1 | 1.4.1 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de hertzbeat
Les 7 CVE de hertzbeat →
CVE-2024-42362
Hertzbeat is an open source, real-time monitoring system
8.8
Élevée
CVE-2023-51389
Hertzbeat is a real-time monitoring system
9.8
Critique
CVE-2023-51653
Hertzbeat is a real-time monitoring system
9.8
Critique
CVE-2023-51650
Hertzbeat is an open source, real-time monitoring system
7.5
Élevée