CVE-2024-41151
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Nov 18, 2024
Updated: Nov 21, 2024
CWE ID 502
Summary
CVE-2024-41151 is a deserialization vulnerability discovered in Apache HertzBeat. This issue allows authorized attackers to exploit untrusted data, potentially leading to serious consequences. The vulnerability can be found in Apache HertzBeat versions prior to 1.6.1. To mitigate this risk, users are strongly encouraged to upgrade to the latest version, which includes a fix for this deserialization issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.