CVE-2024-41151

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 18, 2024
Updated: Nov 21, 2024
CWE ID 502

Summary

CVE-2024-41151 is a deserialization vulnerability discovered in Apache HertzBeat. This issue allows authorized attackers to exploit untrusted data, potentially leading to serious consequences. The vulnerability can be found in Apache HertzBeat versions prior to 1.6.1. To mitigate this risk, users are strongly encouraged to upgrade to the latest version, which includes a fix for this deserialization issue.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share