Dromara Hertzbeat vulnerabilities
- apache hertzbeatGHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import8.8 High
- apache hertzbeatGHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull}7.5 High
- apache hertzbeatHertzBeat SnakeYAML Deser RCE9.8 Critical
- apache hertzbeatHertzBeat AviatorScript Inject RCE9.8 Critical
- apache hertzbeatHertzbeat JMX JNDI RCE9.8 Critical
- apache hertzbeatUnauthorized access vulnerability on three interfaces7.5 High
- apache hertzbeatExpression Injection Vulnerability in Hertzbeat7.2 High
- apache hertzbeatPermission bypass due to incorrect configuration in github.com/dromara/hertzbeat7.5 High