Unrated severityNVD Advisory· Published Aug 20, 2024· Updated Aug 21, 2024
GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import
CVE-2024-42362
Description
Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
6- github.com/apache/hertzbeat/commit/79f5408e345e8e89da97be05f43e3204a950ddfbmitrex_refsource_MISC
- github.com/apache/hertzbeat/commit/9dbbfb7812fc4440ba72bdee66799edd519d06bbmitrex_refsource_MISC
- github.com/apache/hertzbeat/pull/1611mitrex_refsource_MISC
- github.com/apache/hertzbeat/pull/1620mitrex_refsource_MISC
- github.com/apache/hertzbeat/pull/1620/filesmitrex_refsource_MISC
- securitylab.github.com/advisories/GHSL-2023-254_GHSL-2023-256_HertzBeat/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.