{"metadata": {"vulnerability": "CVE-2021-24284", "count": 51, "kinds": {"milestone": 4, "sighting": 25, "kev": 11, "other": 11}}, "data": [{"timestamp": "2021-01-14T00:00:00Z", "date_only": false, "value": "2021-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-14T11:38:17Z", "date_only": false, "value": "2021-05-14T11:38:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-05-14T12:15:00Z", "date_only": false, "value": "2021-05-14T12:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WQVG-8Q49-HJC7", "record": "GHSA-WQVG-8Q49-HJC7", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-05-14T12:15:00Z", "date_only": false, "value": "2021-05-14T12:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-24284", "record": "GSD-2021-24284", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-05-14T12:15:08.387Z", "date_only": false, "value": "2021-05-14T12:15:08.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24284", "record": "FKIE_CVE-2021-24284", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-05-20T00:00:00Z", "date_only": true, "value": "2021-05-20", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-36531", "record": "CNVD-2021-36531", "field": "submitTime", "linked_record": true}, {"timestamp": "2021-05-22T00:00:00Z", "date_only": true, "value": "2021-05-22", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-36531", "record": "CNVD-2021-36531", "field": "openTime", "linked_record": true}, {"timestamp": "2022-05-24T19:02:28Z", "date_only": false, "value": "2022-05-24T19:02:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WQVG-8Q49-HJC7", "record": "GHSA-WQVG-8Q49-HJC7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-24284", "field": "evidence.0.details.added_date", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-24284", "field": "status.status_updated_at", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-14T15:06:23Z", "date_only": false, "value": "2022-07-14T15:06:23.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2021-24284", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-07-15T00:00:18Z", "date_only": false, "value": "2022-07-15T00:00:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WQVG-8Q49-HJC7", "record": "GHSA-WQVG-8Q49-HJC7", "field": "modified", "linked_record": true}, {"timestamp": "2022-07-15T13:33:55Z", "date_only": false, "value": "2022-07-15T13:33:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/1013", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "f0437e99-11bf-4157-ac13-0b1bd9c8f13f", "content": "\u200b\u26a1\ufe0f \u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u044b \u0438\u0437-\u0437\u0430 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e: \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 1,6 \u043c\u043b\u043d. \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u043b\u0430\u0433\u0438\u043d Kaswara Modern WPBakery Page Builder, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0437\u0430\u0431\u0440\u043e\u0448\u0435\u043d \u0435\u0433\u043e \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0434\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-24284. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u044e\u0431\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430.\n\n\u041f\u043e\u043f\u044b\u0442\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c 1 599 852 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0438\u0437 \u043d\u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0442\u0447\u0435\u0442\u0443 Wordfence Threat Intelligence Team, \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u0441 4 \u0438\u044e\u043b\u044f, \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 443 868 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c. \u0410\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442\u0441\u044f \u0441 10 215 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043f\u0440\u0438\u0447\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0442 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043c\u0435\u043d\u044c\u0448\u0438\u043c \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u00abwp-admin/admin-ajax/php\u00bb, \u043f\u044b\u0442\u0430\u044f\u0441\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c AJAX-\u0444\u0443\u043d\u043a\u0446\u0438\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u00abuploadFontIcon\u00bb \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0439 PHP-\u0444\u0430\u0439\u043b. \u042d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u043e\u044f\u043d\u0430 NDSW, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 \u043a\u043e\u0434 \u0432 JavaScript-\u0444\u0430\u0439\u043b\u044b, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u0438 \u0441\u0430\u0439\u0442\u044b \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d Kaswara Modern WPBakery Page Builder Addons \u0441\u043e \u0441\u0432\u043e\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress. \u0415\u0441\u043b\u0438 \u043f\u043b\u0430\u0433\u0438\u043d \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n#WordPress #\u041f\u043b\u0430\u0433\u0438\u043d #\u0425\u0430\u043a\u0435\u0440\u044b #\u041a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/1013", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-19T20:21:54Z", "date_only": false, "value": "2022-07-19T20:21:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3194", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "45ef5dae-22b9-4cda-b215-01ff25afca01", "content": "\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Wordfence \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0435 Kaswara \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u0430 WordPress WPBakery Page Builder.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0430\u044f \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2021 \u0433\u043e\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2021-24284 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 10 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b PHP \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0430\u0439\u0442, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Wordfence, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 JavaScript \u0432 \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 WordPress \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0430\u0439\u0442.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f Wordfence \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0430\u0433\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0435\u0433\u043e. \u0418 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f 0-day \u043f\u0440\u043e\u0448\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0433\u043e\u0434\u0430, \u0431\u043e\u043b\u0435\u0435 8000 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d.\n\n\u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0435\u043b\u044c Wordfence \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u043a\u0438\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 - \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0434\u043e 440 000 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0435\u043d\u044c \u0441 10 215 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0412 \u0446\u0435\u043b\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0447\u0435\u043a\u043d\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0431\u043e\u043b\u0435\u0435 1,5 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0430\u0439\u0442\u043e\u0432 WordPress \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u043f\u0440\u043e\u0441\u0430 POST \u043d\u0430\u00a0/wp-admin/admin-ajax.php\u00a0\u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c AJAX uploadFontIcon \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\u00a0\n\n\u0410\u043a\u0442\u043e\u0440 \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0433\u0440\u0443\u0437\u0438\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c PHP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0432\u00a0\u043a\u0430\u0442\u0430\u043b\u043e\u0433 /wp-content/uploads/kaswara/icons/\u00a0\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0442\u0440\u043e\u044f\u043d NDSW, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b JavaScript \u0438 \u043c\u043e\u0433 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u043e\u043c\u0435\u043d\u044b.\n\n\u041d\u0435\u0440\u0430\u0441\u0442\u043e\u0440\u043e\u043f\u043d\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u043b\u044b\u0448\u0430\u0442\u044c Wordfence \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d Kaswara Modern WPBakery Page Builder Addons \u0441\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u0430\u0439\u0442\u0430 WordPress.", "url": "https://t.me/true_secator/3194", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-08-13T21:01:30Z", "date_only": false, "value": "2022-08-13T21:01:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2211", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "b77bf56d-0cfb-4771-96bc-3f128b7134bd", "content": "Warning for WordPress admins: uninstall the Modern WPBakery plugin immediately!\n\n\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 WordPress \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d.\n\u042d\u0442\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f: Modern WPBakery page builder addons. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2021-24284, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \"\u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 AJAX 'uploadFontIcon'\". \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 PHP-\u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0430\u0439\u0442 WordPress, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0430\u0439\u0442\u0430.", "url": "https://t.me/poxek/2211"}, {"timestamp": "2022-09-28T19:35:00Z", "date_only": false, "value": "2022-09-28T19:35Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-24284", "record": "GSD-2021-24284", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-10-14T14:56:50Z", "date_only": false, "value": "2023-10-14T14:56:50+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-24284", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:56:50Z", "date_only": false, "value": "2023-10-14T14:56:50+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-24284", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:37.394Z", "date_only": false, "value": "2023-12-13T01:23:37.394202Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-24284", "record": "GSD-2021-24284", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-08T14:56:27Z", "date_only": false, "value": "2024-01-08T14:56:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2650", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "29926868-7a06-4807-9f33-e6e5c3290149", "content": "#ExploitObserverAlert\n\nCVE-2021-24284\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2021-24284. The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with no checks for malicious files such as PHP.\n\nFIRST-EPSS: 0.967600000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/2650"}, {"timestamp": "2024-08-03T19:28:22.818Z", "date_only": false, "value": "2024-08-03T19:28:22.818Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T19:28:22.818Z", "date_only": false, "value": "2024-08-03T19:28:22.818Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-24284", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-21T00:00:00Z", "date_only": false, "value": "2024-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-21)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "32522448-a002-455d-9fc4-e183f11c93b9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "7decd867-7cc1-4bc8-9a08-f0d805aef6fc"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "f39f2506-95d6-4807-92f2-637b67ee600b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "60a04aa9-3090-4a70-bcc0-4675826960b9"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-19)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "486b5771-b599-439b-a72f-95d0bc61eff4"}, {"timestamp": "2025-05-25T00:00:00Z", "date_only": false, "value": "2025-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "08614c50-baa9-4e79-8c98-55fdbdeb2470", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-31T03:00:55Z", "date_only": false, "value": "2025-08-31T03:00:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "82eeb2c7-da5d-413e-8ab3-264de72c8b19"}, {"timestamp": "2025-08-31T03:12:42Z", "date_only": false, "value": "2025-08-31T03:12:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "c83045cd-ce90-407c-b33b-5963eea68362"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "2fce565f-9f88-4ec4-a77b-7bd0eb555514"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "8ccb9184-a6bf-47c2-8689-679a6d6cf987", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-11-27T00:00:00Z", "date_only": false, "value": "2025-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "2682af5c-2273-461a-ab68-2a417ef9983f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "cab21c01-2fe4-4901-82aa-beb22e7fc6b5", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-11)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "3d86a2b6-6483-4b88-8246-b8b0c1a91500"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "646d8c3e-119b-4301-89e5-b91634e31ed9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "335768cf-4dde-49b9-92a9-dc6e9644d866"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "b41e6c34-05a5-4a42-bc3f-df0a23976990"}, {"timestamp": "2026-06-17T03:39:45.913Z", "date_only": false, "value": "2026-06-17T03:39:45.913", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24284", "record": "FKIE_CVE-2021-24284", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:47:06.918Z", "date_only": false, "value": "2026-06-19T12:47:06.918407Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0250296a-864b-4def-b199-cfc75efcaa7f", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "82a52bcd-32dd-4dd6-bff6-ba5f71959970", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0250296a-864b-4def-b199-cfc75efcaa7f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:53.301Z", "date_only": false, "value": "2026-06-23T11:12:53.301638Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "852aadc1-462b-4e1a-bfef-4ebb20ce7eab", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:04:03.467Z", "date_only": false, "value": "2026-06-23T14:04:03.467522Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb021a48-0a9d-467c-9e27-381c89cff8dc", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "62432379-86d3-4c62-a5b4-181c4594c9a9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb021a48-0a9d-467c-9e27-381c89cff8dc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:20.902Z", "date_only": false, "value": "2026-06-30T09:23:20.902648Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e964153f-0f48-4633-9400-663fa812d463", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "b3996e1c-7c80-4ab3-8171-f50a94b11cf5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e964153f-0f48-4633-9400-663fa812d463", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T05:54:21.839Z", "date_only": false, "value": "2026-07-01T05:54:21.839336Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "record": "CVE-2021-24284", "field": "creation_timestamp", "uuid": "a76fe290-d74f-4bfe-9789-1062cf186ece", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-24284", "field": "timestamps.last_seen_at", "uuid": "2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": true, "value": "2026-11-06", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-24284", "field": "evidence.0.details.observation_date", "uuid": "2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T00:00:00Z", "date_only": false, "value": "2026-11-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-24284", "field": "status.status_updated_at", "uuid": "2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-08T01:00:03Z", "date_only": false, "value": "2026-11-08T01:00:03+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-24284", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "2ec8f2e8-3d91-486e-b8b6-e6dec1cda48f", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-11T03:59:35.101Z", "anchors": {"origin": {"timestamp": "2021-05-14T11:38:17Z", "date_only": false, "value": "2021-05-14T11:38:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-05-14T11:38:17Z", "date_only": false, "value": "2021-05-14T11:38:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 36717229.0, "hours": 10199.230277777779, "days": 424.9679282407407, "min_seconds": 36717229.0, "max_seconds": 36717229.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-05-14T11:38:17Z", "date_only": false, "value": "2021-05-14T11:38:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 36717229.0, "hours": 10199.230277777779, "days": 424.9679282407407, "min_seconds": 36717229.0, "max_seconds": 36717229.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-05-14T11:38:17Z", "date_only": false, "value": "2021-05-14T11:38:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 173377278.101731, "hours": 48160.355028258615, "days": 2006.6814595107755, "min_seconds": 173377278.101731, "max_seconds": 173377278.101731, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-05-14T11:38:17Z", "date_only": false, "value": "2021-05-14T11:38:17.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-24284", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T03:59:35.101Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 136660049.101731, "hours": 37961.124750480834, "days": 1581.7135312700348, "min_seconds": 136660049.101731, "max_seconds": 136660049.101731, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-13T10:52:06Z", "date_only": false, "value": "2022-07-13T10:52:06+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-24284", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "23dd7c83-e3bd-40f1-b2f7-17b0ef9bf81d", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T03:59:35.101Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}