High severity7.5NVD Advisory· Published Dec 22, 2023· Updated Jun 17, 2026

CVE-2023-51650

Description

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hertzbeat/Hertzbeatllm-fuzzy
Range: <1.4.1
Apache/HertzBeat
cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:*
Range: <1.4.1
Dromara/hertzbeatcpe-rescue
Range: < 1.4.1

Patches

Vulnerability mechanics

References

github.com/dromara/hertzbeat/security/advisories/GHSA-rrc5-qpxr-5jm2nvdExploitVendor Advisory
github.com/dromara/hertzbeat/releases/tag/v1.4.1nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000