Apache HertzBeat XML Injection Leading to Remote Code Execution Vulnerability

A vulnerability allowing XML injection that can be exploited for remote code execution has been identified in Apache HertzBeat (incubating) versions prior to 1.7.0. This issue arises when an authenticated user with access adds a monitor that is parsed as XML. The resulting content can trigger the XML parsing vulnerability by exploiting the HTTP sitemap XML response.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Apache HertzBeat is running.

Remediation

Users are advised to upgrade to Apache HertzBeat version 1.7.0 or later, which addresses this vulnerability.