Skip to content
OpenAdvisories
High · 7.5 CVE-2023-51650 EUVD-2023-56361

Unauthorized access vulnerability on three interfaces

Published Dec 22, 2023 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue.

Affected products

VendorProductAffectedFixed
dromara hertzbeat < 1.4.1 —

References