CVE-2024-42323

Apache HertzBeat versions prior to 1.6.0 are vulnerable to remote code execution (RCE) due to insecure deserialization within the SnakeYAML library. An authenticated attacker can exploit this by submitting a malicious YAML file via the /api/monitors/import or /api/alert/defines/import endpoints. ...