Non évaluée
Apache HertzBeat: RCE by snakeYaml deser load malicious xml
CVE-2024-42323
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat (incubating): before 1.6.0.
Users are recommended to upgrade to version 1.6.0, which fixes the issue.
Références
- advisory github.com
- advisory lists.apache.org
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com