Security Advisory

CVE-2025-48208

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-09 09:31:35

Last updated 2025-11-04 21:10:58

Assigner apache

State PUBLISHED

Description

Improper Neutralization of Special Elements used in an LDAP Query (LDAP Injection) vulnerability in Apache HertzBeat . The attacker needs to have an authenticated account with access, and the attack can only be triggered by crafting custom commands. A successful attack would result in arbitrary script execution. This issue affects Apache HertzBeat: through 1.7.2. Users are recommended to upgrade to version [1.7.3], which fixes the issue.

← Browse all CVEs View on cve.org ↗