<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 07 Jun 2026 15:30:07 +0000</lastBuildDate>
    <item>
      <title>b61b4e88-9980-47a0-92a7-10e01b006c93</title>
      <link>https://vulnerability.circl.lu/sighting/b61b4e88-9980-47a0-92a7-10e01b006c93/export</link>
      <description>{"uuid": "b61b4e88-9980-47a0-92a7-10e01b006c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-38363", "type": "seen", "source": "https://t.me/cvedetector/371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-38363 - Airbyte is a data integration platform for ELT pip\", \n  \"Content\": \"CVE ID : CVE-2024-38363 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder is used to create and test new connectors. Sensitive information, such as credentials, could be exposed if a user tested a new connector on a compromised instance. The connection builder does not have access to any data processes. This vulnerability is fixed in 0.62.2. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:44.000000Z"}</description>
      <content:encoded>{"uuid": "b61b4e88-9980-47a0-92a7-10e01b006c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-38363", "type": "seen", "source": "https://t.me/cvedetector/371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-38363 - Airbyte is a data integration platform for ELT pip\", \n  \"Content\": \"CVE ID : CVE-2024-38363 \nPublished : July 9, 2024, 3:15 p.m. | 16\u00a0minutes ago \nDescription : Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder is used to create and test new connectors. Sensitive information, such as credentials, could be exposed if a user tested a new connector on a compromised instance. The connection builder does not have access to any data processes. This vulnerability is fixed in 0.62.2. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T17:42:44.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b61b4e88-9980-47a0-92a7-10e01b006c93/export</guid>
      <pubDate>Tue, 09 Jul 2024 17:42:44 +0000</pubDate>
    </item>
  </channel>
</rss>
