• caglararli@hotmail.com
  • 05386281520

CVE-2024-42362 | Apache HertzBeat up to 1.5.x /api/monitors/import deserialization (GHSL-2023-254)

Çağlar Arlı      -    18 Views

CVE-2024-42362 | Apache HertzBeat up to 1.5.x /api/monitors/import deserialization (GHSL-2023-254)

A vulnerability, which was classified as very critical, was found in Apache HertzBeat up to 1.5.x. Affected is an unknown function of the file /api/monitors/import. The manipulation leads to deserialization. This vulnerability is traded as CVE-2024-42362. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.