未評価
Apache HertzBeat: RCE by snakeYaml deser load malicious xml
CVE-2024-42323
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat (incubating): before 1.6.0.
Users are recommended to upgrade to version 1.6.0, which fixes the issue.
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com