CVE-2025-24404

published 2025-09-09

CVE-2025-24404: XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat. The attacker needs to have an authenticated account with access, and…

Priority P3 54 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat.

The attacker needs to have an authenticated account with access, and add monitor parsed by xml, returned special content can trigger the XML parsing vulnerability.

This issue affects Apache HertzBeat (incubating): before 1.7.0.

Users are recommended to upgrade to version 1.7.0, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	hertzbeat	< 1.7.0	1.7.0
apache_software_foundation	apache_hertzbeat	< 1.7.0	1.7.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-91