{"metadata": {"vulnerability": "CVE-2022-24877", "count": 25, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 17}}, "data": [{"timestamp": "2022-02-10T00:00:00Z", "date_only": false, "value": "2022-02-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-24877", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-04T00:00:00Z", "date_only": true, "value": "2022-05-04", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-05-04T00:00:00Z", "date_only": true, "value": "2022-05-04", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-05-04T18:04:07Z", "date_only": false, "value": "2022-05-04T18:04:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J77R-2FXF-5JRW", "record": "GHSA-J77R-2FXF-5JRW", "field": "published"}, {"timestamp": "2022-05-06T00:00:00Z", "date_only": true, "value": "2022-05-06", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "namespaces.gitlab.com.advisories.1.pubdate"}, {"timestamp": "2022-05-06T01:10:09Z", "date_only": false, "value": "2022-05-06T01:10:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-24877", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-06T01:10:09Z", "date_only": false, "value": "2022-05-06T01:10:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2022-24877", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-05-06T01:15:00Z", "date_only": false, "value": "2022-05-06T01:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J77R-2FXF-5JRW", "record": "GHSA-J77R-2FXF-5JRW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-06T01:15:09.387Z", "date_only": false, "value": "2022-05-06T01:15:09.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24877", "record": "FKIE_CVE-2022-24877", "field": "published"}, {"timestamp": "2022-05-06T01:15:09.387Z", "date_only": false, "value": "2022-05-06T01:15:09.387", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2022-05-06T18:26:38Z", "date_only": false, "value": "2022-05-06T18:26:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/42087", "record": "CVE-2022-24877", "field": "creation_timestamp", "uuid": "364b2905-1cc0-4a19-b6ad-dabe599ffef4", "content": "\u203c CVE-2022-24877 \u203c\n\nFlux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` allows an attacker to expose sensitive data from the controller\u00c3\u00a2\u00e2\u201a\u00ac\u00e2\u201e\u00a2s pod filesystem and possibly privilege escalation in multi-tenancy deployments. Workarounds include automated tooling in the user's CI/CD pipeline to validate `kustomization.yaml` files conform with specific policies. This vulnerability is fixed in kustomize-controller v0.24.0 and included in flux2 v0.29.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/42087"}, {"timestamp": "2022-05-14T00:00:00Z", "date_only": true, "value": "2022-05-14", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "namespaces.gitlab.com.advisories.1.date"}, {"timestamp": "2022-06-02T17:41:47Z", "date_only": false, "value": "2022-06-02T17:41:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J77R-2FXF-5JRW", "record": "GHSA-J77R-2FXF-5JRW", "field": "modified"}, {"timestamp": "2023-12-13T01:19:43.241Z", "date_only": false, "value": "2023-12-13T01:19:43.241019Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-08T02:06:58.990Z", "date_only": false, "value": "2024-02-08T02:06:58.990", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24877", "record": "GSD-2022-24877", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-03-06T10:55:31.201Z", "date_only": false, "value": "2024-03-06T10:55:31.201Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-KUSTOMIZE-2022-24877", "record": "BIT-KUSTOMIZE-2022-24877", "field": "published"}, {"timestamp": "2024-08-03T04:29:00.196Z", "date_only": false, "value": "2024-08-03T04:29:00.196Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-24877", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T15:53:19.398Z", "date_only": false, "value": "2025-04-23T15:53:19.398679Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24877", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T15:53:19.398Z", "date_only": false, "value": "2025-04-23T15:53:19.398679Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24877", "record": "FKIE_CVE-2022-24877", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T18:29:38.832Z", "date_only": false, "value": "2025-04-23T18:29:38.832Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-24877", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T18:29:38.832Z", "date_only": false, "value": "2025-04-23T18:29:38.832Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24877", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-12-02T17:36:55.459Z", "date_only": false, "value": "2025-12-02T17:36:55.459Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-FLUX-2022-24877", "record": "BIT-FLUX-2022-24877", "field": "published"}, {"timestamp": "2026-06-17T04:32:42.773Z", "date_only": false, "value": "2026-06-17T04:32:42.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24877", "record": "FKIE_CVE-2022-24877", "field": "lastModified"}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-FLUX-2022-24877", "record": "BIT-FLUX-2022-24877", "field": "modified"}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-KUSTOMIZE-2022-24877", "record": "BIT-KUSTOMIZE-2022-24877", "field": "modified"}]}