Security Advisory

CVE-2024-42362

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-20 20:56:23
Last updated 2024-08-21 13:36:54
Assigner GitHub_M
State PUBLISHED

Description

Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.