Critical severity · published Aug 20, 2024
CVE-2024-42361
GHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull}
9.8
CVSS
1.1%
EPSS
No
On KEV
Description
Hertzbeat is an open source, real-time monitoring system. Hertzbeat 1.6.0 and earlier declares a /api/monitor/{monitorId}/metric/{metricFull} endpoint to download job metrics. In the process, it executes a SQL query with user-controlled data, allowing for SQL injection.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HE
HertzBeat · Apache
<= 1.6.0 · source: vendor, NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-42361
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-42361
Patch
https://github.com/dromara/hertzbeat/blob/1f12ac9f2a1a3d86b1d476775e14174243b250a8/manager/src/main/java/org/dromara/hertzbeat/manager/controller/MonitorsController.java#L202
Patch
https://github.com/dromara/hertzbeat/blob/1f12ac9f2a1a3d86b1d476775e14174243b250a8/warehouse/src/main/java/org/dromara/hertzbeat/warehouse/store/HistoryTdEngineDataStorage.java#L242
Patch
https://github.com/dromara/hertzbeat/blob/1f12ac9f2a1a3d86b1d476775e14174243b250a8/warehouse/src/main/java/org/dromara/hertzbeat/warehouse/store/HistoryTdEngineDataStorage.java#L295
Exploit
https://securitylab.github.com/advisories/GHSL-2023-254_GHSL-2023-256_HertzBeat/
More from HertzBeat
9.8
CVE-2023-51389
HertzBeat SnakeYAML Deser RCE
9.8
CVE-2023-51388
HertzBeat AviatorScript Inject RCE
9.8
CVE-2023-51653
Hertzbeat JMX JNDI RCE
8.8
CVE-2026-24343
Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions
8.8
CVE-2025-48208
Apache HertzBeat (incubating): Jmx JNDI injection vulnerability