Vulnerability — CVE-2024-42362

CVE-2024-42362

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-42362
Description:: Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.
Last updated date:: 08/28/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 08/28/2024
Reference url to background: https://securitylab.github.com/advisories/GHSL-2023-254_GHSL-2023-256_HertzBeat/