CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-51387 – Expression Injection Vulnerability in Hertzbeat
https://notcve.org/view.php?id=CVE-2023-51387
Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a crafted alert expression to execute any command on hertzbeat server. A malicious user who has access to alert define function can execute any command in hertzbeat instance. • https://github.com/dromara/hertzbeat/blob/6b599495763120ad1df6f4ed4b6713bb4885d8e2/home/blog/2023-09-26-hertzbeat-v1.4.1.md https://github.com/dromara/hertzbeat/commit/8dcf050e27ca95d15460a7ba98a3df8a9cd1d3d2 https://github.com/dromara/hertzbeat/security/advisories/GHSA-4576-m8px-w9qj • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-39337 – Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat
https://notcve.org/view.php?id=CVE-2022-39337
Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can be bypassed and invoke interfaces without authorization. Version 1.2.1 contains a patch for this issue. Hertzbeat es un sistema de monitoreo en tiempo real de código abierto con monitoreo personalizado, clúster de alto rendimiento, similar a Prometheus y sin agentes. • https://github.com/dromara/hertzbeat/commit/ac5970c6ceb64fafe237fc895243df5f21e40876 https://github.com/dromara/hertzbeat/issues/377 https://github.com/dromara/hertzbeat/pull/382 https://github.com/dromara/hertzbeat/security/advisories/GHSA-434f-f5cw-3rj6 • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-43961
https://notcve.org/view.php?id=CVE-2023-43961
An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass. Un problema en Dromara SaToken versión 1.3.50RC y anteriores al usar controladores dinámicos Spring, una solicitud especialmente manipulada puede provocar una omisión de autenticación. • https://github.com/dromara/Sa-Token/issues/511 • CWE-863: Incorrect Authorization •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 1CVE-2023-44794
https://notcve.org/view.php?id=CVE-2023-44794
An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL. Un problema en Dromara SaToken versión 1.36.0 y anteriores permite a un atacante remoto escalar privilegios a través de un payload manipulado a la URL. • https://github.com/dromara/Sa-Token/issues/515 • CWE-284: Improper Access Control •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-31581
https://notcve.org/view.php?id=CVE-2023-31581
Dromara Sureness before v1.0.8 was discovered to use a hardcoded key. Se descubrió que Dromara Sureness anterior a v1.0.8 utilizaba una clave codificada. • https://github.com/dromara/sureness/issues/164 https://github.com/xubowenW/JWTissues/blob/main/sureness%20secure%20issues.md • CWE-798: Use of Hard-coded Credentials •