Lucene search

CVE-2024-42362

🗓️ 20 Aug 2024 21:14:15Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Hertzbeat open source real-time monitoring system authenticated RCE via unsafe deserialization fixed in 1.6.

Reporter	Title	Published	Views	Family All 4
Vulnrichment	CVE-2024-42362 GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import	20 Aug 202420:56	–	vulnrichment
Cvelist	CVE-2024-42362 GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import	20 Aug 202420:56	–	cvelist
CVE	CVE-2024-42362	20 Aug 202421:15	–	cve
NVD	CVE-2024-42362	20 Aug 202421:15	–	nvd

Source	Link
securitylab	www.securitylab.github.com/advisories/GHSL-2023-254_GHSL-2023-256_HertzBeat/
github	www.github.com/apache/hertzbeat/commit/79f5408e345e8e89da97be05f43e3204a950ddfb
github	www.github.com/apache/hertzbeat/commit/9dbbfb7812fc4440ba72bdee66799edd519d06bb
github	www.github.com/apache/hertzbeat/pull/1611
github	www.github.com/apache/hertzbeat/pull/1620
github	www.github.com/apache/hertzbeat/pull/1620/files

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Aug 2024 21:15Current

6.9Medium risk

Vulners AI Score6.9

CVSS38.8

EPSS0.001

hertzbeat real-time monitoring system authenticated rce unsafe deserialization fixed 1.6.0