GCVE - cpe:2.3:a:apache:hertzbeat:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apache:hertzbeat:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Apache (`b0303047-b7dd-5cf8-abcc-71b7d9d80b95`)
Product	Hertzbeat (`db650799-4cb0-5e34-934b-5f914c6d6cdf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/apache/hertzbeat`	purl2cpe	2026-06-01 10:14:25.247586

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-45791`	vulnerable	2026-06-08 06:48:09.041279	Apache HertzBeat: Exposure sensitive token via http GET method with query string Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue. Published: 2024-11-18T08:45:23.459Z Updated: 2024-11-18T15:04:55.582Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/jmbsfjsvrfnvosh1ftrm3ry4j3sb7doz https://lists.apache.org/thread/lvsczrp8kdynppmzyxtkh4ord4gpw1ph	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45505`	vulnerable	2026-06-08 06:48:06.399850	Apache HertzBeat: Exists Native Deser RCE and file writing vulnerabilities Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache HertzBeat (incubating). This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat (incubating): before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue. Published: 2024-11-18T08:44:46.165Z Updated: 2024-11-18T15:05:53.026Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/h8k14o1bfyod66p113pkgnt1s52p6p19 https://lists.apache.org/thread/gvbc68krhqhht7mkkkx7k13k6k6fdhy0	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-41151`	vulnerable	2026-06-08 06:43:54.112868	Apache HertzBeat: RCE by notice template injection vulnerability Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue. Published: 2024-11-18T08:45:49.288Z Updated: 2024-11-18T15:07:22.821Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/p33tg0vo5nh6kscth4262ktsqo3h5lqo https://lists.apache.org/thread/oor9nw6nh2ojnfw8d8oxrv40cbtk5mwj	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.