{"metadata": {"vulnerability": "CVE-2024-58390", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-12-17T00:00:00Z", "date_only": false, "value": "2024-12-17T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-58390", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T21:01:59.776Z", "date_only": false, "value": "2026-10-12T21:01:59.776Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-58390", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T22:21:44.339Z", "date_only": false, "value": "2026-10-12T22:21:44.339Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-58390", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T22:21:44.339Z", "date_only": false, "value": "2026-10-12T22:21:44.339Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2024-58390", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T22:44:08.482Z", "date_only": false, "value": "2026-10-12T22:44:08.482526Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117430357048055659", "record": "CVE-2024-58390", "field": "creation_timestamp", "uuid": "e8a13461-f3c3-4985-a8e6-9b47013b99e4", "content": "CVE-2024-58390 Frappe before 15.41.0 Privilege Escalation via Document Action Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website User role to System Manager. Authenticated attackers with Website User access can combine this document action with additional steps to obtain administrative System Manager privileges in the Frappe application.\nhttps://www.cve.org/CVERecord?id=CVE-2024-58390https://github.com/frappe/frappe/security/advisories/GHSA-gjqf-v2f6-962hhttps://www.vulncheck.com/advisories/frappe-before-15.41.0-privilege-escalation-via-document-action#frappe#CVE_2024_58390#bot", "url": "https://infosec.exchange/users/cve/statuses/117430357048055659"}, {"timestamp": "2026-10-12T23:17:18Z", "date_only": false, "value": "2026-10-12T23:17:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G6CQ-M3M2-C4H3", "record": "GHSA-G6CQ-M3M2-C4H3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T23:17:18.140Z", "date_only": false, "value": "2026-10-12T23:17:18.140", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-58390", "record": "FKIE_CVE-2024-58390", "field": "published"}, {"timestamp": "2026-10-13T00:31:18Z", "date_only": false, "value": "2026-10-13T00:31:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G6CQ-M3M2-C4H3", "record": "GHSA-G6CQ-M3M2-C4H3", "field": "published"}, {"timestamp": "2026-10-13T00:31:18Z", "date_only": false, "value": "2026-10-13T00:31:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G6CQ-M3M2-C4H3", "record": "GHSA-G6CQ-M3M2-C4H3", "field": "modified"}, {"timestamp": "2026-10-13T11:00:05.534Z", "date_only": false, "value": "2026-10-13T11:00:05.534498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxquvsgaat2n", "record": "CVE-2024-58390", "field": "creation_timestamp", "uuid": "6c0fa2ea-ee65-40c5-b6c8-9364ca417f38", "content": "CVE-2024-58390\nIn versions of Frappe before 14.81.4 and 15.41.0, a user who can log in to the website can exploit a specific function to upgrade their account to full administrative control. This means an attacker could take\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxquvsgaat2n"}, {"timestamp": "2026-10-13T16:40:42.759Z", "date_only": false, "value": "2026-10-13T16:40:42.759621Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-58390", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T16:40:42.759Z", "date_only": false, "value": "2026-10-13T16:40:42.759621Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-58390", "record": "FKIE_CVE-2024-58390", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:46:20.450Z", "date_only": false, "value": "2026-10-13T16:46:20.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-58390", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:46:20.450Z", "date_only": false, "value": "2026-10-13T16:46:20.450Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-58390", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:13.740Z", "date_only": false, "value": "2026-10-13T17:17:13.740", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-58390", "record": "FKIE_CVE-2024-58390", "field": "lastModified"}]}