Vulnerabilities

TI-2024-27501 CVE-2024-41151 · GHSA-jc5h-x77p-hhq6

Apache HertzBeat: RCE by notice template injection vulnerability

MEDIUM 42

Deserialization of Untrusted Data vulnerability in Apache HertzBeat.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00983 Published 2024-11-18 Fixed in 1.6.1 CWE-502

TI-2024-30758 CVE-2024-45791 · GHSA-3m64-79r5-56f2

MEDIUM 40

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00848 Published 2024-11-18 Fixed in 1.6.1 CWE-200

TI-2024-30540 CVE-2024-45505 · GHSA-8c78-wf5j-v7jx

MEDIUM 44

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0221 Published 2024-11-18 Fixed in 1.6.1 CWE-77