Non évaluée
Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
CVE-2024-45505
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating).
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat (incubating): before 1.6.1.
Users are recommended to upgrade to version 1.6.1, which fixes the issue.
Références
- advisory github.com
- advisory lists.apache.org
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com