Unrated
Apache HertzBeat: RCE by notice template injection vulnerability
CVE-2024-41151
First seen on SecPulse
Original description The description as published by the source.
Deserialization of Untrusted Data vulnerability in Apache HertzBeat.
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat: before 1.6.1.
Users are recommended to upgrade to version 1.6.1, which fixes the issue.
References
- advisory github.com
- advisory lists.apache.org
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com