CVE-2025-24404
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-09

Last updated on: 2025-11-04

Assigner: Apache Software Foundation

Description
XML Injection RCE by parse http sitemap xml response vulnerability in Apache HertzBeat. The attacker needs to have an authenticated account with access, and add monitor parsed by xml, returned special content can trigger the XML parsing vulnerability. This issue affects Apache HertzBeat (incubating): before 1.7.0. Users are recommended to upgrade to version 1.7.0, which fixes the issue.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-09
Last Modified
2025-11-04
Generated
2026-06-16
AI Q&A
2025-09-09
EPSS Evaluated
2026-06-15
NVD
CVE-2025-24404
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
apache hertzbeat to 1.7.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-91 The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an XML Injection Remote Code Execution (RCE) issue in Apache HertzBeat before version 1.7.0. An attacker with an authenticated account can add a monitor that parses XML. If the XML response contains specially crafted content, it can trigger the XML parsing vulnerability, potentially allowing the attacker to execute arbitrary code.

Impact Analysis

If exploited, this vulnerability can allow an authenticated attacker to execute arbitrary code on the system running Apache HertzBeat. This could lead to unauthorized control over the system, data compromise, or disruption of services.

Mitigation Strategies

Upgrade Apache HertzBeat to version 1.7.0 or later, as this version fixes the XML Injection RCE vulnerability. Additionally, ensure that only trusted authenticated users have access to add monitors parsed by XML to reduce risk.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-24404. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart