Description
Apache HertzBeat SnakeYaml 反序列化漏洞 可致远程代码执行
Apache HertzBeat SnakeYaml 反序列化漏洞 可致远程代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.aqtd.com/nd.jsp?id=7468
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/Apache-HertzBeat-SnakeYaml-%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2024-42323.md
https://www.leavesongs.com/PENETRATION/jdbc-injection-with-hertzbeat-cve-2024-42323.html
https://www.venustech.com.cn/new_type/aqtg/20240925/27917.html
https://comate.baidu.com/zh/page/n35o80vyl7i
https://wlaq.njupt.edu.cn/2024/1011/c14800a271171/page.htm
https://blog.csdn.net/o0p1q2r3/article/details/152642298
https://ecampus.fudan.edu.cn/42/74/c33375a410228/page.htm
https://www.jintiankansha.me/t/NUCXWzeGFR
https://yulate.github.io/post/g7fC6A2EUF/
https://www.oscs1024.com/hd/MPS-ah36-7tny
https://cn-sec.com/archives/3207997.html
https://www.lwd3699.com/anquan/2505.html
https://zhuanlan.zhihu.com/p/1940539266506667941
https://blog.certcube.com/snakeyaml-deserialization-rce-cve-2024-42323/
https://www.knowsafe.com/ti/info/0/989051
https://drops.blbana.cc/2020/03/24/Java-SnakeYaml%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96/
https://www.cve.org/CVERecord?id=CVE-2024-42323
https://lists.apache.org/thread/r0c4tost4bllqc1n9q6rmzs1slgsq63t
https://nvd.nist.gov/vuln/detail/CVE-2024-42323
https://feedly.com/cve/CVE-2024-42323