CVE-2024-56736 — Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss

CVE-2024-56736

Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss PUBLISHED

Description (CNA)

Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat (incubating): before 1.7.0. Users are recommended to upgrade to version 1.7.0, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache HertzBeat	affected 0 before 1.7.0

CWE

CWE-918

References

https://lists.apache.org/thread/kdzg36h9yxp0q0n4lhcfppxntjy8rj1x
https://lists.apache.org/thread/lwfhsllos1rx9v8k0yhl252cbpqpn0sv

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/04/16/1