CVSS: 10.0EPSS: 5%CPEs: 1EXPL: 0CVE-2023-51653 – Hertzbeat JMX JNDI RCE
https://notcve.org/view.php?id=CVE-2023-51653
22 Feb 2024 — Hertzbeat is a real-time monitoring system. In the implementation of `JmxCollectImpl.java`, `JMXConnectorFactory.connect` is vulnerable to JNDI injection. The corresponding interface is `/api/monitor/detect`. If there is a URL field, the address will be used by default. When the URL is `service:jmx:rmi:///jndi/rmi://xxxxxxx:1099/localHikari`, it can be exploited to cause remote code execution. • https://github.com/dromara/hertzbeat/commit/f794b0d82be49c596c04a042976446559eb315ef • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2023-51650 – Unauthorized access vulnerability on three interfaces
https://notcve.org/view.php?id=CVE-2023-51650
22 Dec 2023 — Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue. Hertzbeat es un sistema de monitoreo en tiempo real de código abierto. • https://github.com/dromara/hertzbeat/releases/tag/v1.4.1 • CWE-862: Missing Authorization •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-51387 – Expression Injection Vulnerability in Hertzbeat
https://notcve.org/view.php?id=CVE-2023-51387
22 Dec 2023 — Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. The alert expressions are supposed to be some simple expressions. However, due to improper sanitization for alert expressions in version prior to 1.4.1, a malicious user can use a crafted alert expression to execute any command on hertzbeat server. A malicious user who has access to alert define function can execute any command in hertzbeat instance. • https://github.com/dromara/hertzbeat/blob/6b599495763120ad1df6f4ed4b6713bb4885d8e2/home/blog/2023-09-26-hertzbeat-v1.4.1.md • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-39337 – Permission bypass due to incorrect configuration in github.com/dromara/hertzbeat
https://notcve.org/view.php?id=CVE-2022-39337
22 Dec 2023 — Hertzbeat is an open source, real-time monitoring system with custom-monitoring, high performance cluster, prometheus-like and agentless. Hertzbeat versions 1.20 and prior have a permission bypass vulnerability. System authentication can be bypassed and invoke interfaces without authorization. Version 1.2.1 contains a patch for this issue. Hertzbeat es un sistema de monitoreo en tiempo real de código abierto con monitoreo personalizado, clúster de alto rendimiento, similar a Prometheus y sin agentes. • https://github.com/dromara/hertzbeat/commit/ac5970c6ceb64fafe237fc895243df5f21e40876 • CWE-284: Improper Access Control CWE-863: Incorrect Authorization •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-43961
https://notcve.org/view.php?id=CVE-2023-43961
25 Oct 2023 — An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass. Un problema en Dromara SaToken versión 1.3.50RC y anteriores al usar controladores dinámicos Spring, una solicitud especialmente manipulada puede provocar una omisión de autenticación. • https://github.com/dromara/Sa-Token/issues/511 • CWE-863: Incorrect Authorization •
CVSS: 10.0EPSS: 2%CPEs: 3EXPL: 1CVE-2023-44794
https://notcve.org/view.php?id=CVE-2023-44794
25 Oct 2023 — An issue in Dromara SaToken version 1.36.0 and before allows a remote attacker to escalate privileges via a crafted payload to the URL. Un problema en Dromara SaToken versión 1.36.0 y anteriores permite a un atacante remoto escalar privilegios a través de un payload manipulado a la URL. • https://github.com/dromara/Sa-Token/issues/515 • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2023-31581
https://notcve.org/view.php?id=CVE-2023-31581
24 Oct 2023 — Dromara Sureness before v1.0.8 was discovered to use a hardcoded key. Se descubrió que Dromara Sureness anterior a v1.0.8 utilizaba una clave codificada. • https://github.com/dromara/sureness/issues/164 • CWE-798: Use of Hard-coded Credentials •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2023-3276 – Dromara HuTool XML Parsing Module XmlUtil.java readBySax xml external entity reference
https://notcve.org/view.php?id=CVE-2023-3276
15 Jun 2023 — A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference. The exploit has been disclosed to the public and may be used. VDB-231626 is the identifier assigned to this vulnerability. • https://fbdhhhh47.github.io/2023/06/06/hutool-XXE • CWE-611: Improper Restriction of XML External Entity Reference •