VULNERABILITY INTELLIGENCE

CVE-2023-51650

CVSS score7.5 HIGH

EPSS probability0.86%

CISA KEVNot currently listed

Published2023-12-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue.

Weakness classification

security-advisories@github.com: CWE-862

Primary references

security-advisories@github.com — Release Notes
security-advisories@github.com — Exploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory