{"metadata": {"vulnerability": "CVE-2024-11954", "count": 25, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-11-28T06:53:25.644Z", "date_only": false, "value": "2024-11-28T06:53:25.644Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-11954", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2025-01-28T01:00:00Z", "date_only": false, "value": "2025-01-28T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-11954", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2025-01-28T13:14:42.976Z", "date_only": false, "value": "2025-01-28T13:14:42.976Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-28T13:15:10.797Z", "date_only": false, "value": "2025-01-28T13:15:10.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2024-11954", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-28T13:25:38.598Z", "date_only": false, "value": "2025-01-28T13:25:38.598188Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113906203889577977", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "726d5407-83ba-4317-95c1-5403a9f76d1f", "url": "https://infosec.exchange/users/cve/statuses/113906203889577977"}, {"timestamp": "2025-01-28T14:15:14Z", "date_only": false, "value": "2025-01-28T14:15:14.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2024-11954", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2025-01-28T14:15:29.070Z", "date_only": false, "value": "2025-01-28T14:15:29.070", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11954", "record": "FKIE_CVE-2024-11954", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-28T14:16:13.963Z", "date_only": false, "value": "2025-01-28T14:16:13.963012Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsnexfyc32t", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "9e1b6b77-5b72-4e2a-92a5-f5ec225a66f8", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgsnexfyc32t"}, {"timestamp": "2025-01-28T14:16:56.639Z", "date_only": false, "value": "2025-01-28T14:16:56.639037Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-11954", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-28T14:16:56.639Z", "date_only": false, "value": "2025-01-28T14:16:56.639037Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11954", "record": "FKIE_CVE-2024-11954", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-28T14:17:00.797Z", "date_only": false, "value": "2025-01-28T14:17:00.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-28T14:17:00.797Z", "date_only": false, "value": "2025-01-28T14:17:00.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-11954", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-28T17:04:28.825Z", "date_only": false, "value": "2025-01-28T17:04:28.825133Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgswrssitt2h", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "b28ad6fb-11c5-447f-b6ea-4816c2075e1b", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgswrssitt2h"}, {"timestamp": "2025-01-28T17:06:59Z", "date_only": false, "value": "2025-01-28T17:06:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/16599", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "7612b08e-202c-4ea0-96d5-839cdb010828", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-11954 - Pimcore Search Document Remote Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-11954 \nPublished : Jan. 28, 2025, 2:15 p.m. | 1\u00a0hour, 18\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown functionality of the component Search Document. The manipulation leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/16599"}, {"timestamp": "2025-01-28T19:12:44Z", "date_only": false, "value": "2025-01-28T19:12:44Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XR3M-6GQ6-22CG", "record": "GHSA-XR3M-6GQ6-22CG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-28T19:12:44Z", "date_only": false, "value": "2025-01-28T19:12:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "56a31f02-aeca-4d18-b5c4-0a20cb4c8d9a", "url": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": true, "value": "2025-02-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-12130", "record": "CNVD-2025-12130", "field": "submitTime", "linked_record": true}, {"timestamp": "2025-04-15T21:02:26.614Z", "date_only": false, "value": "2025-04-15T21:02:26.614669Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxxzqwgj27", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "e3dfda15-77eb-4f99-b6c5-95021f2bb9e2", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxxzqwgj27"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": true, "value": "2025-06-11", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-12130", "record": "CNVD-2025-12130", "field": "openTime", "linked_record": true}, {"timestamp": "2025-11-04T19:52:44Z", "date_only": false, "value": "2025-11-04T19:52:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XR3M-6GQ6-22CG", "record": "GHSA-XR3M-6GQ6-22CG", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T06:58:45.950Z", "date_only": false, "value": "2026-06-17T06:58:45.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-11954", "record": "FKIE_CVE-2024-11954", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-01T20:00:26.942Z", "date_only": false, "value": "2026-09-01T20:00:26.942707Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/151020", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "c9d1b2c3-7662-4688-8654-017c3e9aaebc", "url": "https://t.me/hacking_Attack/151020"}, {"timestamp": "2026-09-01T20:00:26.987Z", "date_only": false, "value": "2026-09-01T20:00:26.987718Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/151022", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "ed18427f-1276-4812-b521-6abfa12e0ba1", "url": "https://t.me/hacking_Attack/151022"}, {"timestamp": "2026-09-03T14:00:05.262Z", "date_only": false, "value": "2026-09-03T14:00:05.262737Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/151020", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "1438c829-fa8f-4a8b-b579-2992acd19ca8", "url": "https://t.me/hacking_Attack/151020", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T21:56:40.958Z", "anchors": {"origin": {"timestamp": "2025-01-28T13:14:42.976Z", "date_only": false, "value": "2025-01-28T13:14:42.976Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-01-28T13:14:42.976Z", "date_only": false, "value": "2025-01-28T13:14:42.976Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-01-28T19:12:44Z", "date_only": false, "value": "2025-01-28T19:12:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "56a31f02-aeca-4d18-b5c4-0a20cb4c8d9a", "url": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 21481.024, "hours": 5.966951111111111, "days": 0.248622962962963, "min_seconds": 21481.024, "max_seconds": 21481.024, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-28T13:14:42.976Z", "date_only": false, "value": "2025-01-28T13:14:42.976Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-01-28T19:12:44Z", "date_only": false, "value": "2025-01-28T19:12:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "56a31f02-aeca-4d18-b5c4-0a20cb4c8d9a", "url": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 56709717.982796, "hours": 15752.699439665555, "days": 656.3624766527315, "min_seconds": 56709717.982796, "max_seconds": 56709717.982796, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-28T13:14:42.976Z", "date_only": false, "value": "2025-01-28T13:14:42.976Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-11954", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T21:56:40.958Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 56688236.958796, "hours": 15746.732488554446, "days": 656.1138536897686, "min_seconds": 56688236.958796, "max_seconds": 56688236.958796, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-28T19:12:44Z", "date_only": false, "value": "2025-01-28T19:12:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "record": "CVE-2024-11954", "field": "creation_timestamp", "uuid": "56a31f02-aeca-4d18-b5c4-0a20cb4c8d9a", "url": "https://github.com/advisories/GHSA-xr3m-6gq6-22cg", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T21:56:40.958Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}