en Se connecter

8.8 Élevée

CVE-2024-42362 Hertzbeat is an open source, real-time monitoring system

Description

Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
HertzBeat 1.6	premières → < 1.6.0	1.6.0
hertzbeat 1.6	premières → < 1.6.0	1.6.0

Références

securitylab.github.com securitylab.github.com
github.com github.com
github.com github.com
github.com github.com
github.com github.com
github.com github.com

Chronologie

Publiée 20 août 2024
Dernière modification 21 août 2024

Les 6 CVE de HertzBeat →

CVE-2024-41151 Deserialization of Untrusted Data vulnerability in Apache HertzBeat Non notée CVE-2024-45791 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat Non notée CVE-2024-45505 Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat… Non notée CVE-2024-42323 SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). This vulnerability can only be… Non notée

Suivre cette CVE