CVE-2024-41151

Published Nov 18, 2024

Last updated 3 months ago

CVSS high 8.8

Overview

Description
Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue.
Source
security@apache.org
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

security@apache.org
CWE-502

Social media

Hype score
Not currently trending

  1. 🔴New vulnerability was just published🔴 CVE ➡️ CVE-2024-41151 Impacting ➡️ Apache HertzBeat CVSS ➡️ 8.8 #cve #securitricks #vulnerability #cybersecurity https://t.co/ZAV4IMkiab

    @SecuriTricks

    18 Nov 2024

    2 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-41151 Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache He… https://t.co/9ySyfQOJMt

    @CVEnew

    18 Nov 2024

    123 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. CVE-2024-41151: Apache HertzBeat: RCE by notice template injection vulne... https://t.co/YVFHRVhlqN via @YouTube #Cybersecurity #ApacheHertzBeat #DeserializationAttack #ITSecurity #SoftwareUpdate #CyberThreats #PatchManagement #OWASP #VulnerabilityFix #ChaoGong #DataSecurity

    @LimitedViewX

    18 Nov 2024

    7 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 3 Apache HertzBeat CVEs CVE-2024-45505: Exists Native Deser RCE and file writing https://t.co/LEBoHw9oe7 CVE-2024-45791: Exposure of sensitive token via HTTP GET https://t.co/rRhrdQNg3y CVE-2024-41151: RCE by notice template injection https://t.co/iBb0JOQpTq

    @oss_security

    16 Nov 2024

    28 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. CVE-2024-41151 Severity moderate Affected versions: - Apache HertzBeat before 1.6.1 ... https://t.co/FISRTN7k2e Vulnerability Notification: https://t.co/xhLrNnfyrO

    @VulmonFeeds

    16 Nov 2024

    9 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References