CVE-2024-56736
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 16, 2025
Updated: Apr 23, 2025
CWE ID 918
Summary
CVE-2024-56736 is a Server-Side Request Forgery (SSRF) vulnerability discovered in Apache HertzBeat, an incubating project. This weakness allows malicious actors to trick the server into sending requests to arbitrary destinations under their control. Affected versions are before 1.7.0. Users are advised to upgrade to the latest version, which addresses this issue, to mitigate the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Apache