Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache HertzBeat .
The attacker needs to have an authenticated account with access, and the attack can only be triggered by crafting custom commands. A successful attack would result in arbitrary script execution.
This issue affects Apache HertzBeat: through 1.7.2.
Users are recommended to upgrade to version [1.7.3], which fixes the issue.
CVSS
No CVSS.
References
Configurations
No configuration.
History
09 Sep 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-09 10:15
Updated : 2025-09-09 16:28
NVD link : CVE-2025-48208
Mitre link : CVE-2025-48208
CVE.ORG link : CVE-2025-48208
JSON object : View
Products Affected
No product.
CWE
CWE-90
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')