{"metadata": {"vulnerability": "CVE-2024-1874", "count": 71, "kinds": {"milestone": 15, "sighting": 4, "kev": 0, "other": 52}}, "data": [{"timestamp": "2024-02-25T04:39:00.479Z", "date_only": false, "value": "2024-02-25T04:39:00.479Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-1874", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-25T06:02:56.350Z", "date_only": false, "value": "2024-02-25T06:02:56.350451Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-1874", "record": "GSD-2024-1874", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-11T17:15:00Z", "date_only": false, "value": "2024-04-11T17:15:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / php", "record": "CVE-2024-1874", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-11T22:00:00Z", "date_only": false, "value": "2024-04-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-11T22:00:00Z", "date_only": false, "value": "2024-04-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-11T22:00:00Z", "date_only": false, "value": "2024-04-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-12T00:00:00Z", "date_only": false, "value": "2024-04-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0300", "record": "CERTFR-2024-AVI-0300", "field": "revisions.0.revision_date"}, {"timestamp": "2024-04-12T14:57:02.466Z", "date_only": false, "value": "2024-04-12T14:57:02.466586Z", "kind": "milestone", "label": "Published", "source": "osv_bellsoft \u00b7 BELL-CVE-2024-1874", "record": "BELL-CVE-2024-1874", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-15T15:02:52Z", "date_only": false, "value": "2024-04-15T15:02:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cultofwire/1255", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "63a592fa-ef47-4bc8-ac90-dd2fd8915d22", "content": "BatBadBut: You can't securely execute commands on Windows\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 Vulnerability Note Multiple programming languages fail to escape arguments properly in Microsoft Windows \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u0430.\n\nBatBadBut \u2014 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CreateProcess, \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\nCreateProcess() \u043d\u0435\u044f\u0432\u043d\u043e \u043f\u043e\u0440\u043e\u0436\u0434\u0430\u0435\u0442 cmd.exe \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (.bat, .cmd \u0438 \u0442. \u0434.), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u043e \u0438\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435.\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e cmd.exe \u0438\u043c\u0435\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b.\n\u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0418\u043c\u043f\u0430\u043a\u0442:\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u041f\u043e\u043b\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u044f\u0437\u044b\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0442\u0430\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c\n\n\u041a\u0430\u043a\u0438\u0435 \u044f\u0437\u044b\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442:\n- Haskell\n- Node.js\n- Rust\n- PHP\n\n\u041d\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a \u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e \u043a Erlang, Go, Java, Python \u0438 Ruby.\n\n\u0421\u043f\u0438\u0441\u043e\u043a CVE:\nCVE-2024-1874\nCVE-2024-22423\nCVE-2024-24576\nCVE-2024-3566", "url": "https://t.me/cultofwire/1255"}, {"timestamp": "2024-04-15T22:00:00Z", "date_only": false, "value": "2024-04-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-04-23T11:10:53.665Z", "date_only": false, "value": "2024-04-23T11:10:53.665644Z", "kind": "other", "label": "Updated", "source": "osv_bellsoft \u00b7 BELL-CVE-2024-1874", "record": "BELL-CVE-2024-1874", "field": "modified"}, {"timestamp": "2024-04-25T22:00:00Z", "date_only": false, "value": "2024-04-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-04-29T00:00:00Z", "date_only": false, "value": "2024-04-29T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-29T00:00:00Z", "date_only": false, "value": "2024-04-29T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-29T03:57:35.624Z", "date_only": false, "value": "2024-04-29T03:57:35.624Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-1874", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-29T04:15:07.580Z", "date_only": false, "value": "2024-04-29T04:15:07.580", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-1874", "record": "FKIE_CVE-2024-1874", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-04-29T04:15:07.580Z", "date_only": false, "value": "2024-04-29T04:15:07.580", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-1874", "record": "GSD-2024-1874", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-29T04:15:07.580Z", "date_only": false, "value": "2024-04-29T04:15:07.580", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-1874", "record": "GSD-2024-1874", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-29T13:05:18.510Z", "date_only": false, "value": "2024-04-29T13:05:18.510843Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-1874", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-04-29T13:05:18.510Z", "date_only": false, "value": "2024-04-29T13:05:18.510843Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-1874", "record": "FKIE_CVE-2024-1874", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-04-29T22:00:00Z", "date_only": false, "value": "2024-04-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-05-02T22:00:00Z", "date_only": false, "value": "2024-05-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-05-07T22:00:00Z", "date_only": false, "value": "2024-05-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-05-14T07:29:52.385Z", "date_only": false, "value": "2024-05-14T07:29:52.385Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PHP-2024-1874", "record": "BIT-PHP-2024-1874", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-05-30T22:00:00Z", "date_only": false, "value": "2024-05-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-06-04T18:00:58.913Z", "date_only": false, "value": "2024-06-04T18:00:58.913Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-1874", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-04T22:00:00Z", "date_only": false, "value": "2024-06-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-06-10T07:02:05.106Z", "date_only": false, "value": "2024-06-10T07:02:05.106950Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0243", "record": "NCSC-2024-0243", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-10T07:02:05.106Z", "date_only": false, "value": "2024-06-10T07:02:05.106950Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0243", "record": "NCSC-2024-0243", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-10T07:02:05.106Z", "date_only": false, "value": "2024-06-10T07:02:05.106950Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0243", "record": "NCSC-2024-0243", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-11T00:00:00Z", "date_only": false, "value": "2024-06-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0475", "record": "CERTFR-2024-AVI-0475", "field": "revisions.0.revision_date"}, {"timestamp": "2024-06-13T04:06:17.168Z", "date_only": false, "value": "2024-06-13T04:06:17.168Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / php", "record": "CVE-2024-1874", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13867-1", "record": "OPENSUSE-SU-2024:13867-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13867-1", "record": "OPENSUSE-SU-2024:13867-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13867-1", "record": "OPENSUSE-SU-2024:13867-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13867-1", "record": "OPENSUSE-SU-2024:13867-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-06-16T22:00:00Z", "date_only": false, "value": "2024-06-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-06-24T22:00:00Z", "date_only": false, "value": "2024-06-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2024-06-30T07:00:00Z", "date_only": false, "value": "2024-06-30T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-07-02T00:00:00Z", "date_only": true, "value": "2024-07-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0475", "record": "CERTFR-2024-AVI-0475", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-18T15:28:53Z", "date_only": false, "value": "2024-07-18T15:28:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8020", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "432a2d33-11e2-402c-9d46-4e43566df4b8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof Of Concept for CVE-2024-1874\nURL\uff1ahttps://github.com/Tgcohce/CVE-2024-1874\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8020", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-11T22:00:00Z", "date_only": false, "value": "2024-08-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-10-17T13:15:19.595Z", "date_only": false, "value": "2024-10-17T13:15:19.595269Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0411", "record": "NCSC-2024-0411", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-21T23:00:00Z", "date_only": false, "value": "2024-11-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2024-12-11T23:00:00Z", "date_only": false, "value": "2024-12-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2024-12-12T23:00:00Z", "date_only": false, "value": "2024-12-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2024-12-18T23:00:00Z", "date_only": false, "value": "2024-12-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2025-05-12T22:00:00Z", "date_only": false, "value": "2025-05-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.revision_history.16.date"}, {"timestamp": "2025-05-12T22:00:00Z", "date_only": false, "value": "2025-05-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-13T11:16:01.911Z", "date_only": false, "value": "2025-05-13T11:16:01.911+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0867", "record": "WID-SEC-W-2024-0867", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-11T13:54:08.513Z", "date_only": false, "value": "2025-08-11T13:54:08.513Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-LIBPHP-2024-1874", "record": "BIT-LIBPHP-2024-1874", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-11-04T18:22:36.621Z", "date_only": false, "value": "2025-11-04T18:22:36.621Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-1874", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T18:22:36.621Z", "date_only": false, "value": "2025-11-04T18:22:36.621Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-1874", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-14T14:45:34Z", "date_only": false, "value": "2025-11-14T14:45:34Z", "kind": "milestone", "label": "Published", "source": "osv_haskell \u00b7 HSEC-2024-0003", "record": "HSEC-2024-0003", "field": "published"}, {"timestamp": "2025-11-14T14:45:34Z", "date_only": false, "value": "2025-11-14T14:45:34Z", "kind": "other", "label": "Updated", "source": "osv_haskell \u00b7 HSEC-2024-0003", "record": "HSEC-2024-0003", "field": "modified"}, {"timestamp": "2025-11-20T10:52:56.637Z", "date_only": false, "value": "2025-11-20T10:52:56.637820Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m62lztqs2s25", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "b78f401e-66f7-4b31-9a47-8ed174c1b395", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m62lztqs2s25"}, {"timestamp": "2026-02-18T02:49:02Z", "date_only": false, "value": "2026-02-18T02:49:02.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-02-18T02:49:02Z", "date_only": false, "value": "2026-02-18T02:49:02.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-18T08:20:17.615Z", "date_only": false, "value": "2026-02-18T08:20:17.615Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T07:05:11.613Z", "date_only": false, "value": "2026-06-17T07:05:11.613", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-1874", "record": "FKIE_CVE-2024-1874", "field": "lastModified"}, {"timestamp": "2026-06-26T23:19:37.401Z", "date_only": false, "value": "2026-06-26T23:19:37.401941Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ivanys2244-sys/cd3c2a40e041f4b33eddc1479dd0d4f9", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "0dc8101e-0f69-49bd-ab96-c94a71375597", "content": "# Security Advisory \u2014 Target E-commerce Platform\n\n> **Note:** This is an anonymized sample report for portfolio purposes. All identifying information (domain, IP addresses, third-party service names) has been replaced with placeholders. The original report was sent to the affected vendor through responsible disclosure channels.\n\n## Summary\n\nPassive security assessment of a Russian-language e-commerce platform running behind a two-layer WAF (Cloudflare + DDoS-Guard). The platform sells in-game currency and ranks for a Minecraft server. The backend is hosted on shared infrastructure and runs a customized SaaS shopping cart (EasyDonate) on top of OctoberCMS.\n\n**16 findings identified** during passive reconnaissance:\n- **3 HIGH** \u2014 outdated PHP version, missing security headers, origin server reachable via DNS bypass\n- **5 MEDIUM** \u2014 cookie security issues, missing authentication on cart mutations, open redirect in SSO handler\n- **6 LOW** \u2014 information disclosure, missing cookie flags\n- **2 INFO** \u2014 operational observations, GDPR considerations\n\n**Critical chain:** outdated PHP 7.4 on origin + DNS resolution bypass = potential RCE if CVE-2024-4577 or CVE-2024-1874 is exploitable on this configuration.\n\n## Architecture\n\n```\nINTERNET \u2500\u25ba HTTPS \u2500\u25ba Cloudflare Edge (203.0.113.10, CF-ASN)\n                    \u2193 HTTPS\n                  DDoS-Guard Proxy (transparent, rate-limit + WAF)\n                    \u2193 HTTPS / unix-socket\n                  ORIGIN SERVER (203.0.113.42)\n                    nginx + PHP 7.4.33 + OctoberCMS + EasyDonate\n                    + Minecraft server :25565 (same host)\n```\n\n## Network reconnaissance\n\n### DNS\n- A: 203.0.113.10 (Cloudflare edge)\n- AAAA: none (no IPv6)\n- NS: jim.ns.cloudflare.com, kay.ns.cloudflare.com\n- MX: none (no mail server)\n- TXT: \"v=spf1 -all\" (strict SPF, prevents spoofing)\n- DMARC: **not configured** (recommendation below)\n\n### Subdomain enumeration\nWildcard A-record `*.target-a.example` resolves to origin IP 203.0.113.42 for all subdomains (admin, dev, git, cp, etc.). This is a reconnaissance shortcut for attackers and a DNS rebinding attack surface.\n\n### Reverse-IP\nThe Minecraft server (203.0.113.42:25565) is on the same physical host as the web application. Compromise of one = compromise of both.\n\n## Findings\n\n### HIGH severity\n\n#### F-001 \u00b7 PHP 7.4.33 (EOL since 2022-11-28)\n\n**CVSS:** 7.5 | **CWE:** CWE-1104 (Use of Unmaintained Third Party Components)\n\n**Evidence:** `X-Powered-By: PHP/7.4.33` header visible when reaching the origin directly.\n\n**Impact:** All PHP 7.4 CVEs are unpatched. Most critical:\n- **CVE-2024-4577** (CVSS 9.8) \u2014 PHP-CGI argument injection \u2192 unauthenticated RCE\n- **CVE-2024-1874** (CVSS 9.4) \u2014 PHP-FPM `SCRIPT_FILENAME` LFI \u2192 RCE\n- Multiple XSS, DoS, information disclosure CVEs\n\nThe site processes payment data, which compounds the risk.\n\n**Remediation:**\n1. Upgrade to PHP 8.3+ (EasyDonate 5.x supports 8.1+)\n2. Test in staging environment before production cutover\n3. Subscribe to PHP security advisories: https://www.php.net/security/\n\n---\n\n#### F-002 \u00b7 Missing critical security headers\n\n**CVSS:** 7.4 | **CWE:** CWE-693 (Protection Mechanism Failure)\n\n**Evidence:** All security headers NOT SET in HTTP responses.\n\n**Missing headers:**\n- `Content-Security-Policy` \u2014 no defense against XSS / inline scripts\n- `X-Frame-Options` \u2014 site can be embedded in iframe (clickjacking on /payment)\n- `Strict-Transport-Security` \u2014 SSL-stripping MITM possible\n- `X-Content-Type-Options` \u2014 MIME-sniffing on uploaded avatars\n- `Referrer-Policy` \u2014 leaks full URL in Referer\n- `Permissions-Policy` \u2014 no restriction on camera/mic/geolocation\n\n**Impact:** Any future XSS vulnerability = full account takeover. Clickjacking on payment forms = financial damage. SSL-stripping = session theft.\n\n**Remediation (nginx):**\n```nginx\nadd_header Strict-Transport-Security \"max-age=31536000; includeSubDomains\" always;\nadd_header X-Frame-Options \"SAMEORIGIN\" always;\nadd_header X-Content-Type-Options \"nosniff\" always;\nadd_header Referrer-Policy \"strict-origin-when-cross-origin\" always;\nadd_header Permissions-Policy \"camera=(), microphone=(), geolocation=()\" always;\nadd_header Content-Security-Policy \"default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.easydonate-equivalent.example https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https://cdnjs.cloudflare.com; frame-src https://sso-provider.example; connect-src 'self' https://api.easydonate-equivalent.example\" always;\n```\n\n---\n\n#### F-003 \u00b7 Origin server reachable via DNS resolution bypass\n\n**CVSS:** 7.5 | **CWE:** CWE-284 (Improper Access Control)\n\n**Evidence:**\n```bash\n$ curl --resolve target-a.example:443:203.0.113.42 -I https://target-a.example/\nHTTP/1.1 200 OK\nServer: ddos-guard\nX-Powered-By: PHP/7.4.33\n```\n\n**Description:** A simple `--resolve` flag in curl bypasses Cloudflare DNS and connects directly to the origin IP. DDoS-Guard does not block this because the connection appears to come from a legitimate client IP. Attackers can:\n1. Discover origin IP via DNS enumeration (subdomain brute force shows origin for 100+ subdomains)\n2. Bypass Cloudflare security policies (rate limiting, WAF rules, IP geo-blocking)\n3. Reach the origin's PHP 7.4 stack directly (compounds F-001)\n\n**Remediation:**\n1. **Primary:** Migrate origin to **Cloudflare Tunnel** (cloudflared) \u2014 origin has no public IP, only Cloudflare can reach it\n2. **Alternative:** Configure DDoS-Guard to allowlist ONLY Cloudflare IP ranges: https://www.cloudflare.com/ips/\n3. **Quick fix:** Block origin IP from non-Cloudflare sources at the hosting provider firewall\n\n---\n\n### MEDIUM severity (selected)\n\n#### F-004 \u00b7 DDoS-Guard cookies leak client IP\n\nThe `__ddg9_` cookie stores the client IP in plaintext. `__ddg8_` and `__ddg10_` are missing `Secure` and `HttpOnly` flags.\n\n**Remediation:** DDoS-Guard supports cookie hardening options \u2014 enable Secure flag for all cookies.\n\n---\n\n#### F-005 \u00b7 `cart_session` cookie missing Secure flag\n\n**Evidence:** `Set-Cookie: cart_session=...; path=/; httponly; samesite=lax` (no `secure` flag despite HTTPS-only deployment)\n\n**Remediation:** In platform config: set `'cookie_secure' => true`.\n\n---\n\n#### F-006 \u00b7 `PUT /cart` accepts any value without authentication\n\n**Evidence:** `PUT /cart` with `{\"product_id\":1,\"quantity\":-1,\"price\":-1000}` returns 200 OK\n\n**Impact:** If session ID is known (via XSS leak or session fixation), attacker can modify victim's cart, potentially changing prices at checkout.\n\n**Remediation:** Add authentication middleware to cart mutations + validate `quantity > 0` and `price >= server-set-price` server-side.\n\n---\n\n#### F-007 \u00b7 SSO postMessage redirect handler has no URL allowlist\n\n**Evidence:** SSO client library (in `easyid.js`-equivalent):\n```js\nwindow.addEventListener('message', message => {\n    if (!message.isTrusted) return;\n    if (message.origin != 'https://sso-provider.example') return;\n    if (message.data.type != 'sso:redirect') return;\n    window.location.href = message.data.data.redirect;  // NO URL VALIDATION\n});\n```\n\nWhile the origin and isTrusted checks are correct, the redirect URL is never validated. If the SSO provider is compromised, attacker can navigate iframe to any URL.\n\n**Remediation:**\n```js\nconst allowed = new Set([window.location.origin, 'https://target-a.example']);\nif (!allowed.has(new URL(message.data.data.redirect).origin)) return;\n```\n\n---\n\n### LOW severity (selected)\n\n- **X-Powered-By header** leaks PHP version \u2192 `expose_php = Off`\n- **SSO setCookie** missing Secure/HttpOnly \u2192 update to `Secure;SameSite=Strict`\n- **IDOR via /product/{id}** returns 200 with 404-template on non-existent IDs \u2192 use `abort(404)`\n- **AJAX handler enumeration** via error message reflection \u2192 log details server-side only\n- **Missing DMARC record** \u2192 add `_dmarc` TXT with `v=DMARC1; p=reject; rua=mailto:security@example.com`\n- **Payment form without `target=_blank`** \u2192 vulnerable to reverse tabnabbing\n\n---\n\n### INFO\n\n- **Minecraft server offline** at port 25565 (operational issue, likely crashed Java process)\n- **Commercial fingerprinting library deployed** without explicit GDPR consent banner\n\n---\n\n## Coverage\n\n### Tested\n- \u2705 DNS recon (A, AAAA, NS, MX, TXT, reverse)\n- \u2705 Subdomain enumeration (100+ subdomains)\n- \u2705 HTTP fingerprint (Server, X-Powered-By, headers)\n- \u2705 TLS certificate analysis\n- \u2705 Security headers audit\n- \u2705 Cookie security analysis\n- \u2705 Method tampering (PUT/PATCH/DELETE probes, no mutation)\n- \u2705 AJAX handler enumeration\n- \u2705 IDOR via GET request pattern\n- \u2705 CORS configuration\n- \u2705 Cloudflare bypass proof-of-concept (--resolve, read-only)\n- \u2705 Static analysis of HTML/JS/CSS\n- \u2705 FingerprintJS privacy audit\n- \u2705 OAuth/SSO flow analysis\n- \u2705 Payment flow analysis (form targets, postMessage)\n\n### Not tested (out of scope for passive engagement)\n- \u274c Active exploitation (CVE PoC, RCE attempts)\n- \u274c SQLi / XSS submit attempts\n- \u274c File upload bypass\n- \u274c Brute-force on auth endpoints\n- \u274c Modifying site state\n\n## Remediation summary\n\n| Priority | Action | Estimated effort |\n|----------|--------|------------------|\n| **URGENT** | Upgrade PHP 7.4 \u2192 8.3+ | 1 week |\n| **URGENT** | Add security headers (CSP, HSTS, XFO) | 1 hour |\n| **URGENT** | Block origin from non-Cloudflare IPs | 1 hour |\n| **HIGH** | Fix PUT /cart auth + validation | 1 day |\n| **HIGH** | SSO redirect URL allowlist | 1 hour |\n| **MEDIUM** | Fix all cookie flags (Secure, HttpOnly) | 4 hours |\n| **MEDIUM** | Add DMARC record | 30 minutes |\n| **MEDIUM** | Migrate origin to Cloudflare Tunnel | 1 day |\n| **LOW** | Remove X-Powered-By, fix IDOR, add CSRF | 1 day |\n| **OPS** | Restart Minecraft server | 30 minutes |\n| **GDPR** | Add consent banner for fingerprinting | 1 day |\n\n## Disclosure process\n\nThis report was prepared in accordance with responsible disclosure principles:\n- All findings obtained through passive reconnaissance (HTTP GET, public DNS, static analysis)\n- No active exploitation performed\n- No state mutation attempted\n- 90-day disclosure window offered to vendor\n\n---\n\n*Generated for security research portfolio. All identifying information anonymized.*\n", "url": "https://gist.github.com/ivanys2244-sys/cd3c2a40e041f4b33eddc1479dd0d4f9"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-LIBPHP-2024-1874", "record": "BIT-LIBPHP-2024-1874", "field": "modified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PHP-2024-1874", "record": "BIT-PHP-2024-1874", "field": "modified"}, {"timestamp": "2026-09-20T21:09:23Z", "date_only": false, "value": "2026-09-20T21:09:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13867-1", "record": "OPENSUSE-SU-2024:13867-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:09:23Z", "date_only": false, "value": "2026-09-20T21:09:23Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13867-1", "record": "OPENSUSE-SU-2024:13867-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-06T00:38:37.496Z", "date_only": false, "value": "2026-10-06T00:38:37.496131Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GO78577", "record": "CLEANSTART-2026-GO78577", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-08T15:57:32Z", "date_only": false, "value": "2026-10-08T15:57:32Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GO78577", "record": "CLEANSTART-2026-GO78577", "field": "modified"}], "metrics": {"as_of": "2026-10-30T20:11:32.249Z", "anchors": {"origin": {"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-07-18T15:28:53Z", "date_only": false, "value": "2024-07-18T15:28:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8020", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "432a2d33-11e2-402c-9d46-4e43566df4b8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof Of Concept for CVE-2024-1874\nURL\uff1ahttps://github.com/Tgcohce/CVE-2024-1874\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8020", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2024-04-29T00:00:00Z", "date_only": false, "value": "2024-04-29T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 9275333.0, "hours": 2576.481388888889, "days": 107.35339120370371, "min_seconds": 9275333.0, "max_seconds": 9275333.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-07-18T15:28:53Z", "date_only": false, "value": "2024-07-18T15:28:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8020", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "432a2d33-11e2-402c-9d46-4e43566df4b8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof Of Concept for CVE-2024-1874\nURL\uff1ahttps://github.com/Tgcohce/CVE-2024-1874\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8020", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 2307600.0, "hours": 641.0, "days": 26.708333333333332, "min_seconds": 2307600.0, "max_seconds": 2394000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-04-29T00:00:00Z", "date_only": false, "value": "2024-04-29T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 2307600.0, "hours": 641.0, "days": 26.708333333333332, "min_seconds": 2307600.0, "max_seconds": 2394000.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-04-02T07:00:00Z", "date_only": false, "value": "2024-04-02T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-04-29T00:00:00Z", "date_only": false, "value": "2024-04-29T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": -6967733.0, "hours": -1935.481388888889, "days": -80.64505787037037, "min_seconds": -6967733.0, "max_seconds": -6881333.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-07-18T15:28:53Z", "date_only": false, "value": "2024-07-18T15:28:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8020", "record": "CVE-2024-1874", "field": "creation_timestamp", "uuid": "432a2d33-11e2-402c-9d46-4e43566df4b8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aProof Of Concept for CVE-2024-1874\nURL\uff1ahttps://github.com/Tgcohce/CVE-2024-1874\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8020", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2024-04-29T00:00:00Z", "date_only": false, "value": "2024-04-29T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-1874", "record": "MSRC_CVE-2024-1874", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event"}}}}