CVE-2025-48208 | Apache Hertzbeat up to 1.7.1 JNDI ldap injection

SecurityVulns

A vulnerability classified as critical was found in Apache Hertzbeat up to 1.7.1. This impacts an unknown function of the component JNDI Handler. The manipulation results in ldap injection.

This vulnerability is known as CVE-2025-48208. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More