{"vulnerability": "CVE-2023-51653", "sightings": [{"uuid": "dd8f9e9a-75e1-4a82-99fc-84ac1e8835cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-51653", "type": "seen", "source": "https://bsky.app/profile/nerq-ai.bsky.social/post/3mhhynpcl7a2r", "content": "", "creation_timestamp": "2026-03-20T07:30:13.634524Z"}, {"uuid": "4916c408-9dff-40d3-b860-1a4be43bf472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-51653", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12913", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-51653\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Hertzbeat is a real-time monitoring system. In the implementation of `JmxCollectImpl.java`, `JMXConnectorFactory.connect` is vulnerable to JNDI injection. The corresponding interface is `/api/monitor/detect`. If there is a URL field, the address will be used by default. When the URL is `service:jmx:rmi:///jndi/rmi://xxxxxxx:1099/localHikari`, it can be exploited to cause remote code execution. Version 1.4.1 contains a fix for this issue.\n\ud83d\udccf Published: 2024-02-22T15:39:49.280Z\n\ud83d\udccf Modified: 2025-04-22T16:19:23.604Z\n\ud83d\udd17 References:\n1. https://github.com/dromara/hertzbeat/security/advisories/GHSA-gcmp-vf6v-59gg\n2. https://github.com/dromara/hertzbeat/commit/f794b0d82be49c596c04a042976446559eb315ef", "creation_timestamp": "2025-04-22T17:03:37.000000Z"}, {"uuid": "36f2c4c2-73ce-4935-9258-0074e8447fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-51653", "type": "seen", "source": "https://t.me/ctinow/206702", "content": "https://ift.tt/zHmoLtw\nCVE-2023-51653 | Dromara Hertzbeat up to 1.4.0 JNDI JmxCollectImpl.java JMXConnectorFactory.connect injection", "creation_timestamp": "2024-03-13T14:11:56.000000Z"}, {"uuid": "db1f601b-4193-4d3f-ad9a-5cb695d65862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-51653", "type": "seen", "source": "https://t.me/ctinow/190962", "content": "https://ift.tt/246GNSD\nCVE-2023-51653", "creation_timestamp": "2024-02-22T17:26:56.000000Z"}, {"uuid": "312dd172-2c86-45ec-80c8-ea38d53d3676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-51653", "type": "seen", "source": "https://t.me/ctinow/190966", "content": "https://ift.tt/246GNSD\nCVE-2023-51653", "creation_timestamp": "2024-02-22T17:31:44.000000Z"}]}