{"metadata": {"vulnerability": "CVE-2024-6324", "count": 39, "kinds": {"milestone": 10, "sighting": 7, "kev": 0, "other": 22}}, "data": [{"timestamp": "2024-06-25T14:02:21.468Z", "date_only": false, "value": "2024-06-25T14:02:21.468Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-6324", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": true, "value": "2025-01-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0015", "record": "CERTFR-2025-AVI-0015", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-01-08T16:11:36.168Z", "date_only": false, "value": "2025-01-08T16:11:36.168466Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113793610252558322", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "6f548d35-44f5-4418-a3f0-5054433eadc9", "url": "https://infosec.exchange/users/screaminggoat/statuses/113793610252558322"}, {"timestamp": "2025-01-08T23:00:00Z", "date_only": false, "value": "2025-01-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-08T23:00:00Z", "date_only": false, "value": "2025-01-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-08T23:00:00Z", "date_only": false, "value": "2025-01-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "vulnerabilities.2.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-09T00:00:00Z", "date_only": false, "value": "2025-01-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0015", "record": "CERTFR-2025-AVI-0015", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-01-09T06:02:46.213Z", "date_only": false, "value": "2025-01-09T06:02:46.213Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-6324", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-09T06:02:46.213Z", "date_only": false, "value": "2025-01-09T06:02:46.213Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2024-6324", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T06:14:45Z", "date_only": false, "value": "2025-01-09T06:14:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/890", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "af40a5a6-0911-4005-8ce8-f1b43e4fce3d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-6324\n\ud83d\udd39 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics.\n\ud83d\udccf Published: 2025-01-09T06:02:46.213Z\n\ud83d\udccf Modified: 2025-01-09T06:02:46.213Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/468914\n2. https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#cyclic-reference-of-epics-leads-resource-exhaustion\n3. https://hackerone.com/reports/2553716", "url": "https://t.me/DarkWebInformer_CVEAlerts/890"}, {"timestamp": "2025-01-09T06:15:00Z", "date_only": false, "value": "2025-01-09T06:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-6324", "record": "UBUNTU-CVE-2024-6324", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-09T06:15:15Z", "date_only": false, "value": "2025-01-09T06:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3C89-47F8-W5C6", "record": "GHSA-3C89-47F8-W5C6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-01-09T06:15:15.390Z", "date_only": false, "value": "2025-01-09T06:15:15.390", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6324", "record": "FKIE_CVE-2024-6324", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-09T06:16:00.662Z", "date_only": false, "value": "2025-01-09T06:16:00.662567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzordmke2e", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "78d73330-b4ef-4844-843e-ca2a75a51393", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzordmke2e"}, {"timestamp": "2025-01-09T06:30:24Z", "date_only": false, "value": "2025-01-09T06:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3C89-47F8-W5C6", "record": "GHSA-3C89-47F8-W5C6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-09T06:30:24Z", "date_only": false, "value": "2025-01-09T06:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3C89-47F8-W5C6", "record": "GHSA-3C89-47F8-W5C6", "field": "modified", "linked_record": true}, {"timestamp": "2025-01-09T06:44:00.337Z", "date_only": false, "value": "2025-01-09T06:44:00.337622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aqnie62y", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "3078b406-f493-46c9-a9b9-b63a5331923e", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aqnie62y"}, {"timestamp": "2025-01-09T07:43:08Z", "date_only": false, "value": "2025-01-09T07:43:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14784", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "66fc8fcd-fac7-4c80-8d9a-332cc07f16f6", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6324 - GitLab DoS (Denial of Service) - Cyclic Epic Reference\", \n  \"Content\": \"CVE ID : CVE-2024-6324 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. It was possible to trigger a DoS by creating cyclic references between epics. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14784"}, {"timestamp": "2025-01-09T15:32:24.285Z", "date_only": false, "value": "2025-01-09T15:32:24.285965Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-6324", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-09T15:32:24.285Z", "date_only": false, "value": "2025-01-09T15:32:24.285965Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6324", "record": "FKIE_CVE-2024-6324", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-09T15:32:34.143Z", "date_only": false, "value": "2025-01-09T15:32:34.143Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-6324", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-09T15:32:34.143Z", "date_only": false, "value": "2025-01-09T15:32:34.143Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-6324", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-10T19:17:23.895Z", "date_only": false, "value": "2025-01-10T19:17:23.895Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2024-6324", "record": "BIT-GITLAB-2024-6324", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-22T00:00:00Z", "date_only": true, "value": "2025-01-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0063", "record": "CERTFR-2025-AVI-0063", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-01-22T16:29:50.089Z", "date_only": false, "value": "2025-01-22T16:29:50.089530Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113872954267513452", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "f1bac108-b445-4ab6-a04d-8e98e9c249fc", "url": "https://infosec.exchange/users/screaminggoat/statuses/113872954267513452"}, {"timestamp": "2025-01-22T23:00:00Z", "date_only": false, "value": "2025-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0171", "record": "WID-SEC-W-2025-0171", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-01-22T23:00:00Z", "date_only": false, "value": "2025-01-22T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0171", "record": "WID-SEC-W-2025-0171", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-22T23:00:00Z", "date_only": false, "value": "2025-01-22T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0171", "record": "WID-SEC-W-2025-0171", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-22T23:00:00Z", "date_only": false, "value": "2025-01-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0171", "record": "WID-SEC-W-2025-0171", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0063", "record": "CERTFR-2025-AVI-0063", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2025-01-23T09:33:49.318Z", "date_only": false, "value": "2025-01-23T09:33:49.318+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0171", "record": "WID-SEC-W-2025-0171", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-01-27T23:00:00Z", "date_only": false, "value": "2025-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2025-01-27T23:00:00Z", "date_only": false, "value": "2025-01-27T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-01-28T10:41:55.925Z", "date_only": false, "value": "2025-01-28T10:41:55.925+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0063", "record": "CERTFR-2025-AVI-0063", "field": "revisions.1.revision_date", "linked_record": true}, {"timestamp": "2025-10-24T05:06:45Z", "date_only": false, "value": "2025-10-24T05:06:45Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-6324", "record": "UBUNTU-CVE-2024-6324", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T08:17:46.797Z", "date_only": false, "value": "2026-06-17T08:17:46.797", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6324", "record": "FKIE_CVE-2024-6324", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-04T13:00:14.965Z", "date_only": false, "value": "2026-08-04T13:00:14.965411Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/195", "record": "CVE-2024-6324", "field": "creation_timestamp", "uuid": "9375ec1c-1fc7-4ea1-b0b5-481e61eb0e94", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SMA1000 Appliance Management Console (AMC) \u0438 Central Management Console (CMC). \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u0430\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 SonicWall, \u0435\u0435 \u0443\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\ud83d\udd35\u0421\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 CVE \u0432 GitLab \u2014 CVE-2025-0314 (\u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0444\u0430\u0439\u043b\u043e\u0432, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c), CVE-2024-11931 (\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0440\u043e\u0432\u043d\u044f \u00ab\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u00bb \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CI lint \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c CI/CD) \u0438 CVE-2024-6324 (\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0447\u0430\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0443 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043c\u0435\u0436\u0434\u0443 Epics).\n\n\ud83d\udd35CVE-2024-54507 \u2014 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 XNU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 macOS \u0438 iOS. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u043f\u0430\u0442\u0447\u0435\u043c \u043e\u0442 11 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f. CVE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 (sysctl), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0438\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c.\n\n\ud83d\udd35CVE-2024-50050 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0434\u043d\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c opensource \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 GenAI. \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 pyzmq, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35CVE-2020-11023 \u2014 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u044f\u0442\u0438\u043b\u0435\u0442\u043d\u044e\u044e \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u044c, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 jQuery \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 HTML-\u043a\u043e\u0434\u0430 (\u0441 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438  \u0438\u0437 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432) \u0432 \u043e\u0434\u0438\u043d \u0438\u0437 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 jQuery \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 DOM (.html(), .append() \u0438 \u0434\u0440\u0443\u0433\u0438\u0435) \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041f\u0430\u0442\u0447 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0435\u0449\u0435 \u0432 2020 \u0433\u043e\u0434\u0443. \n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/195"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2024-6324", "record": "BIT-GITLAB-2024-6324", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-03T15:42:45.485Z", "anchors": {"origin": {"timestamp": "2025-01-08T23:00:00Z", "date_only": false, "value": "2025-01-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-01-08T23:00:00Z", "date_only": false, "value": "2025-01-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 57343365.485407, "hours": 15928.712634835278, "days": 663.6963597848032, "min_seconds": 57343365.485407, "max_seconds": 57343365.485407, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-08T23:00:00Z", "date_only": false, "value": "2025-01-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0033", "record": "WID-SEC-W-2025-0033", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-03T15:42:45.485Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}