← Database

CVE-2024-42323

HIGH CVSS: 8.8 Published: 2024-09-21 Modified: 2026-06-17

Description

SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).  This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.0. Users are recommended to upgrade to version 1.6.0, which fixes the issue.

Affected Platforms

Apache Hertzbeat

Weakness Type

CWE-502

References