8.8
Élevée
CVE-2024-42362 Hertzbeat is an open source, real-time monitoring system
Description
Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.
Produits et versions touchés
Autres CVE de HertzBeat
Les 6 CVE de HertzBeat →
CVE-2024-41151
Deserialization of Untrusted Data vulnerability in Apache HertzBeat
Non notée
CVE-2024-45791
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat
Non notée
CVE-2024-45505
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat…
Non notée
CVE-2024-42323
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). This vulnerability can only be…
Non notée