High severity · published Sep 21, 2024
CVE-2024-42323
Apache HertzBeat: RCE by snakeYaml deser load malicious xml
8.8
CVSS
8.3%
EPSS
No
On KEV
Description
SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating).
This vulnerability can only be exploited by authorized attackers.
This issue affects Apache HertzBeat (incubating): before 1.6.0.
Users are recommended to upgrade to version 1.6.0, which fixes the issue.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)8.3% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AH
Apache HertzBeat · Apache Software Foundation
before 1.6.0 · source: vendor
HE
Hertzbeat · Apache
before 1.6.0 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-42323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-42323
Mailing List
https://lists.apache.org/thread/dwpwm572sbwon1mknlwhkpbom2y7skbx
Mailing List
https://lists.apache.org/thread/r0c4tost4bllqc1n9q6rmzs1slgsq63t
Mailing List
http://www.openwall.com/lists/oss-security/2024/09/21/1
More from Apache HertzBeat
8.8
CVE-2026-24343
Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
8.8
CVE-2024-41151
Apache HertzBeat: RCE by notice template injection vulnerability
8.8
CVE-2024-45505
Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities
7.5
CVE-2024-45791
Apache HertzBeat: Exposure sensitive token via http GET method with query string
6.5
CVE-2024-56736
Apache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config Oss