CVE-2024-42323

Severity CVSS v4.0:
Pending analysis
Type:
CWE-502 Deserialization of Untrusted Dat
Publication date:
21/09/2024
Last modified:
01/07/2025

Description

SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). <br /> <br /> This vulnerability can only be exploited by authorized attackers.<br /> This issue affects Apache HertzBeat (incubating): before 1.6.0.<br /> <br /> Users are recommended to upgrade to version 1.6.0, which fixes the issue.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:apache:hertzbeat:*:*:*:*:*:*:*:* 1.6.0 (excluding)