CVE-2024-56736: Apache HertzBeat (incubating): Server-Side Request Forgery (SSRF) in Api Config Oss

[Chao Gong <gongchao () apache org>]

Severity: low

Affected versions:

- Apache HertzBeat (incubating) before 1.7.0

Description:

Server-Side Request Forgery (SSRF) vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat (incubating): before 1.7.0.

Users are recommended to upgrade to version 1.7.0, which fixes the issue.

Credit:

tonghuaroot (finder)
zyufoye (finder)

References:

https://www.cve.org/CVERecord?id=CVE-2024-56736