CVE-2024-42362

Publication date

2024-08-20 20:56:23

Family

GitHub_M

State

PUBLISHED

Description

Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.