6 matches found
CVE-2024-45505
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.1. Users are recommended to upgrade to versi...
CVE-2024-45505
creationtimestamp| type| source ---|---|--- 2024-11-18 08:47:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113503085889412388 2024-11-18 10:41:45+00:00| seen| https://t.me/cvedetector/11305...
CVE-2024-45505
A command injection vulnerability exists in Apache HertzBeat (incubating) versions prior to 1.6.1 . The root cause is the application's failure to properly filter special characters and commands during construction, which could allow an attacker to execute arbitrary commands on the system. This v...
CVE-2024-45505 Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.1. Users are recommended to upgrade to versi...
CVE-2024-45505 Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.1. Users are recommended to upgrade to versi...
CVE-2024-45505 Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache HertzBeat incubating. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat incubating: before 1.6.1. Users are recommended to upgrade to versi...