← Database

CVE-2024-45505

HIGH CVSS: 8.8 Published: 2024-11-18 Modified: 2026-06-17

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.

Affected Platforms

Apache Hertzbeat

Weakness Type

CWE-77

References