← CVE Intelligence

CVE-2024-45505

Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities PUBLISHED

Description (CNA)

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache HertzBeataffected 0 before 1.6.1

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.