Skip to content
OpenAdvisories
High · 7.5 CVE-2024-45791 EUVD-2024-41602GHSA-3m64-79r5-56f2

Apache HertzBeat: Exposure sensitive token via http GET method with query string

Published Nov 18, 2024 · Updated Nov 18, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache HertzBeat

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat: before 1.6.1.

Users are recommended to upgrade to version 1.6.1, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache HertzBeat < 1.6.1 1.6.1

References