CVE-2023-51650

Unauthorized access vulnerability on three interfaces

State: Published
Severity: 7.5 High
Published: Dec 22, 2023
Updated: Apr 23, 2025
Reserved: Dec 20, 2023

Description

Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration issues caused unauthorized access vulnerabilities to three interfaces. This could result in disclosure of sensitive server information. Version 1.4.1 fixes this issue.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	GitHub_M

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
hertzbeatdromara	< 1.4.1Affected

References

https://github.com/dromara/hertzbeat/security/advisories/GHSA-rrc5-qpxr-5jm2
https://github.com/dromara/hertzbeat/releases/tag/v1.4.1

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.