{"metadata": {"vulnerability": "CVE-2024-34323", "count": 21, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 8}, "linked_omitted": 0}, "data": [{"timestamp": "2024-05-02T00:00:00Z", "date_only": false, "value": "2024-05-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-34323", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-34323", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-13T15:01:12.767Z", "date_only": false, "value": "2026-10-13T15:01:12.767Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-34323", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T15:09:00.208Z", "date_only": false, "value": "2026-10-13T15:09:00.208444Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434229696967205", "record": "cve-2024-34323", "field": "creation_timestamp", "uuid": "2ddea607-1328-409e-b6c9-d6d244e84c67", "content": "CVE-2024-34319  A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and web requests via a crafted HTTP request.\nhttps://www.cve.org/CVERecord?id=CVE-2024-34319https://prophoenix.com/law-rms/https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details#prophoenix#CVE_2024_34319#bot", "url": "https://infosec.exchange/users/cve/statuses/117434229696967205"}, {"timestamp": "2026-10-13T15:20:13.211Z", "date_only": false, "value": "2026-10-13T15:20:13.211335Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434273798874050", "record": "cve-2024-34323", "field": "creation_timestamp", "uuid": "1add7af8-01a5-479d-82b2-1ed517e6ab84", "content": "CVE-2024-34320  ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.\nhttps://www.cve.org/CVERecord?id=CVE-2024-34320https://prophoenix.com/law-rms/https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details#prophoenix#CVE_2024_34320#bot", "url": "https://infosec.exchange/users/cve/statuses/117434273798874050"}, {"timestamp": "2026-10-13T15:20:59.386Z", "date_only": false, "value": "2026-10-13T15:20:59.386980Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434276460556660", "record": "cve-2024-34323", "field": "creation_timestamp", "uuid": "749cf3ee-6be3-48ad-8c5f-3e735d6cef09", "content": "CVE-2024-34321  ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.\nhttps://www.cve.org/CVERecord?id=CVE-2024-34321https://prophoenix.com/law-rms/https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details#prophoenix#CVE_2024_34321#bot", "url": "https://infosec.exchange/users/cve/statuses/117434276460556660"}, {"timestamp": "2026-10-13T15:21:34.019Z", "date_only": false, "value": "2026-10-13T15:21:34.019347Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434279103270744", "record": "cve-2024-34323", "field": "creation_timestamp", "uuid": "bbd0c8c6-bf2b-4643-8e4b-43553f4113f0", "content": "CVE-2024-34323  ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request.\nhttps://www.cve.org/CVERecord?id=CVE-2024-34323https://prophoenix.com/law-rms/https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details#prophoenix#CVE_2024_34323#bot", "url": "https://infosec.exchange/users/cve/statuses/117434279103270744"}, {"timestamp": "2026-10-13T15:22:14.323Z", "date_only": false, "value": "2026-10-13T15:22:14.323612Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434281744748113", "record": "cve-2024-34323", "field": "creation_timestamp", "uuid": "0344b5d5-f7b0-4f25-8632-82f901f6206f", "content": "CVE-2024-34324  An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie.\nhttps://www.cve.org/CVERecord?id=CVE-2024-34324https://prophoenix.com/law-rms/https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details#prophoenix#CVE_2024_34324#bot", "url": "https://infosec.exchange/users/cve/statuses/117434281744748113"}, {"timestamp": "2026-10-13T15:22:54.772Z", "date_only": false, "value": "2026-10-13T15:22:54.772738Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434284387794456", "record": "cve-2024-34323", "field": "creation_timestamp", "uuid": "46cd73d8-4151-41b2-96e9-ce02d5728764", "content": "CVE-2024-34326  ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/MsgType parameter in the errorHandler.aspx endpoint.\nhttps://www.cve.org/CVERecord?id=CVE-2024-34326https://prophoenix.com/law-rms/https://sedriclouissaint.com/blog/prophoenix-law-rms-authentication-bypass-cve-2024-34323/#cve-details#prophoenix#CVE_2024_34326#bot", "url": "https://infosec.exchange/users/cve/statuses/117434284387794456"}, {"timestamp": "2026-10-13T16:17:08Z", "date_only": false, "value": "2026-10-13T16:17:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2V4R-2649-G36P", "record": "GHSA-2V4R-2649-G36P", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-13T16:17:08.210Z", "date_only": false, "value": "2026-10-13T16:17:08.210", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34323", "record": "FKIE_CVE-2024-34323", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T18:30:48Z", "date_only": false, "value": "2026-10-13T18:30:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2V4R-2649-G36P", "record": "GHSA-2V4R-2649-G36P", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-13T18:35:54.782Z", "date_only": false, "value": "2026-10-13T18:35:54.782397Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-34323", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-13T18:35:54.782Z", "date_only": false, "value": "2026-10-13T18:35:54.782397Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34323", "record": "FKIE_CVE-2024-34323", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-13T18:36:24.976Z", "date_only": false, "value": "2026-10-13T18:36:24.976Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-34323", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T18:36:24.976Z", "date_only": false, "value": "2026-10-13T18:36:24.976Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-34323", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T19:33:20.315Z", "date_only": false, "value": "2026-10-13T19:33:20.315916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxrrliriatlk", "record": "CVE-2024-34323", "field": "creation_timestamp", "uuid": "4a14f52a-141d-4e91-b0cd-2bf1145642f3", "content": "CVE Radar | CVE-2024-34323 | CVSS 10.0\n\nCVE-2024-34323: ProPhoenix Law RMS IDOR\n\nNVD describes an insecure direct object reference (IDOR) in ProPhoenix Law RMS v2022.2403.3.101.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1256", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxrrliriatlk"}, {"timestamp": "2026-10-13T20:07:59.707Z", "date_only": false, "value": "2026-10-13T20:07:59.707656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtjjgbba2o", "record": "CVE-2024-34323", "field": "creation_timestamp", "uuid": "b60f8814-52ea-4295-93e0-5324fff086e2", "content": "\ud83d\udea8 CVE-2024-34323 \u2014 CVSS 10 CRITICAL\n\nProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) vi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2024-34323\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxrtjjgbba2o"}, {"timestamp": "2026-10-13T20:50:04.988Z", "date_only": false, "value": "2026-10-13T20:50:04.988694Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxrvurzmb22l", "record": "CVE-2024-34323", "field": "creation_timestamp", "uuid": "99df5eab-4711-4316-b1a5-1c0d25ad7325", "content": "CVE-2024-34323\nThe 2022.2403.3.101 version of ProPhoenix Law RMS does not properly verify who is requesting information, so someone could send a specially crafted web request and see private data belonging to other users.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxrvurzmb22l"}, {"timestamp": "2026-10-13T21:32:26Z", "date_only": false, "value": "2026-10-13T21:32:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2V4R-2649-G36P", "record": "GHSA-2V4R-2649-G36P", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-27T19:10:00.123Z", "date_only": false, "value": "2026-10-27T19:10:00.123", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34323", "record": "FKIE_CVE-2024-34323", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-11T14:59:40.148Z", "anchors": {"origin": {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-34323", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-34323", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 2559580.148616, "hours": 710.9944857266667, "days": 29.624770238611113, "min_seconds": 2473180.148616, "max_seconds": 2559580.148616, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-34323", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T14:59:40.148Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}