{"metadata": {"vulnerability": "CVE-2024-12426", "count": 51, "kinds": {"milestone": 9, "sighting": 19, "kev": 0, "other": 23}}, "data": [{"timestamp": "2024-12-10T16:37:23.376Z", "date_only": false, "value": "2024-12-10T16:37:23.376Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-12426", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": true, "value": "2025-01-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0006", "record": "CERTFR-2025-AVI-0006", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-01-07T12:22:32.991Z", "date_only": false, "value": "2025-01-07T12:22:32.991Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-12426", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-07T12:22:32.991Z", "date_only": false, "value": "2025-01-07T12:22:32.991Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Document Fdn.", "record": "CVE-2024-12426", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-07T13:15:00Z", "date_only": false, "value": "2025-01-07T13:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-12426", "record": "UBUNTU-CVE-2024-12426", "field": "published"}, {"timestamp": "2025-01-07T13:15:07Z", "date_only": false, "value": "2025-01-07T13:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X7M8-VRFV-272V", "record": "GHSA-X7M8-VRFV-272V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-07T13:15:07.210Z", "date_only": false, "value": "2025-01-07T13:15:07.210", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12426", "record": "FKIE_CVE-2024-12426", "field": "published"}, {"timestamp": "2025-01-07T13:15:57.742Z", "date_only": false, "value": "2025-01-07T13:15:57.742346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7ubh4m2a", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "716ad1c8-72cc-47fc-a4a5-9fc131bae561", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7ubh4m2a"}, {"timestamp": "2025-01-07T13:53:35.781Z", "date_only": false, "value": "2025-01-07T13:53:35.781261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd5duoz2k", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "2ca90f8b-f1a3-437d-91ac-a68e2996ecab", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd5duoz2k"}, {"timestamp": "2025-01-07T14:38:29.579Z", "date_only": false, "value": "2025-01-07T14:38:29.579414Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12426", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-07T14:38:29.579Z", "date_only": false, "value": "2025-01-07T14:38:29.579414Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12426", "record": "FKIE_CVE-2024-12426", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-07T14:38:34.076Z", "date_only": false, "value": "2025-01-07T14:38:34.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-12426", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-07T14:42:42Z", "date_only": false, "value": "2025-01-07T14:42:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14538", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "11c325c7-a649-48d0-bcab-03d79099c06d", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12426 - LibreOffice Environmental Variable Exfiltration\", \n  \"Content\": \"CVE ID : CVE-2024-12426 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice.  \n  \n  \n  \n  \nURLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.  \n  \n  \nThis issue affects LibreOffice: from 24.8 before < 24.8.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14538"}, {"timestamp": "2025-01-07T15:31:46Z", "date_only": false, "value": "2025-01-07T15:31:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X7M8-VRFV-272V", "record": "GHSA-X7M8-VRFV-272V", "field": "published"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-07T23:00:00Z", "date_only": false, "value": "2025-01-07T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0006", "record": "CERTFR-2025-AVI-0006", "field": "last_revision_date"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0006", "record": "CERTFR-2025-AVI-0006", "field": "initial_release_date"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0006", "record": "CERTFR-2025-AVI-0006", "field": "revisions.0.revision_date"}, {"timestamp": "2025-01-19T23:00:00Z", "date_only": false, "value": "2025-01-19T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-01-27T23:00:00Z", "date_only": false, "value": "2025-01-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-02-17T01:32:28Z", "date_only": false, "value": "2025-02-17T01:32:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11819", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "8835c61f-6bcd-430e-915a-e10c4c9a91ee", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "url": "https://t.me/CyberSecurityTechnologies/11819"}, {"timestamp": "2025-02-17T23:00:00Z", "date_only": false, "value": "2025-02-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-02-18T02:59:27.597Z", "date_only": false, "value": "2025-02-18T02:59:27.597200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligbe4kacs2n", "record": "cve-2024-12426", "field": "creation_timestamp", "uuid": "d7c1ec82-7548-47eb-89eb-2f6440d16e43", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligbe4kacs2n"}, {"timestamp": "2025-02-18T03:49:37.091Z", "date_only": false, "value": "2025-02-18T03:49:37.091889Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lige5mhsjc2h", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "0e1da964-1da0-4d89-8bef-48398975f382", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lige5mhsjc2h"}, {"timestamp": "2025-02-18T09:01:44.432Z", "date_only": false, "value": "2025-02-18T09:01:44.432767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3ligvlwbngk2c", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "441f29ad-cdec-4580-a741-7ffdc1760234", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3ligvlwbngk2c"}, {"timestamp": "2025-02-18T10:26:00.160Z", "date_only": false, "value": "2025-02-18T10:26:00.160937Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/securestep9/statuses/114024085695036829", "record": "cve-2024-12426", "field": "creation_timestamp", "uuid": "f84d8e27-7ad4-486e-bdf1-1f2e1f1ccb1a", "url": "https://infosec.exchange/users/securestep9/statuses/114024085695036829"}, {"timestamp": "2025-02-18T10:52:38.986Z", "date_only": false, "value": "2025-02-18T10:52:38.986781Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lih3saq7hg26", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "a72f5a0c-6e6a-4e61-be55-7566bb75e848", "url": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lih3saq7hg26"}, {"timestamp": "2025-02-20T05:23:47Z", "date_only": false, "value": "2025-02-20T05:23:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/2471", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "cdadde42-bf55-4f00-8c11-5857e2872165", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "url": "https://t.me/ton618cyber/2471"}, {"timestamp": "2025-02-20T05:23:47Z", "date_only": false, "value": "2025-02-20T05:23:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/6704", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "974ef64a-ad19-482e-9a1d-2756159c1e3a", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "url": "https://t.me/ton618cyber/6704"}, {"timestamp": "2025-02-24T08:28:15.572Z", "date_only": false, "value": "2025-02-24T08:28:15.572998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3livwjlrvma22", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "09c7cc86-69c4-4e4c-a465-34caf6c9c067", "url": "https://bsky.app/profile/buherator.bsky.social/post/3livwjlrvma22"}, {"timestamp": "2025-04-29T22:00:00Z", "date_only": false, "value": "2025-04-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-06-12T22:00:00Z", "date_only": false, "value": "2025-06-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-06-12T22:00:00Z", "date_only": false, "value": "2025-06-12T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-06-13T07:00:06.259Z", "date_only": false, "value": "2025-06-13T07:00:06.259+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0028", "record": "WID-SEC-W-2025-0028", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-16T01:45:14Z", "date_only": false, "value": "2025-08-16T01:45:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "71424cc6-c560-4049-a110-9c992a8aa7b5"}, {"timestamp": "2025-08-19T04:06:36Z", "date_only": false, "value": "2025-08-19T04:06:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "a8c76f0c-bf63-4eaa-ad86-ba71d97b91f4"}, {"timestamp": "2025-11-03T20:36:39.840Z", "date_only": false, "value": "2025-11-03T20:36:39.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-12426", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T20:36:39.840Z", "date_only": false, "value": "2025-11-03T20:36:39.840Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-12426", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0992", "record": "CERTFR-2025-AVI-0992", "field": "last_revision_date"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": true, "value": "2025-11-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0992", "record": "CERTFR-2025-AVI-0992", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0992", "record": "CERTFR-2025-AVI-0992", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-08T21:30:18Z", "date_only": false, "value": "2025-12-08T21:30:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X7M8-VRFV-272V", "record": "GHSA-X7M8-VRFV-272V", "field": "modified"}, {"timestamp": "2026-04-22T07:47:57Z", "date_only": false, "value": "2026-04-22T07:47:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-12426", "record": "UBUNTU-CVE-2024-12426", "field": "modified"}, {"timestamp": "2026-06-17T06:59:41.900Z", "date_only": false, "value": "2026-06-17T06:59:41.900", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-12426", "record": "FKIE_CVE-2024-12426", "field": "lastModified"}, {"timestamp": "2026-07-20T22:00:04.768Z", "date_only": false, "value": "2026-07-20T22:00:04.768180Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/126", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "0af5a1b1-d171-4550-9929-2a5d7e141e88", "url": "https://t.me/pphm_HackerNews/126"}, {"timestamp": "2026-07-21T00:00:09.541Z", "date_only": false, "value": "2026-07-21T00:00:09.541173Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/126", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "472d7c42-3e3e-4cd1-9d94-a8eb2b6d7ad6", "url": "https://t.me/pphm_HackerNews/126"}, {"timestamp": "2026-08-04T13:00:11.342Z", "date_only": false, "value": "2026-08-04T13:00:11.342163Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/285", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "5f71e1b8-baad-4ec6-910d-e95dfa497259", "url": "https://t.me/purp_sec/285"}, {"timestamp": "2026-08-05T00:00:22.290Z", "date_only": false, "value": "2026-08-05T00:00:22.290290Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/285", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "c2797b84-4f00-4626-844b-bac28ba5b00a", "url": "https://t.me/purp_sec/285"}, {"timestamp": "2026-10-03T18:50:26.390Z", "date_only": false, "value": "2026-10-03T18:50:26.390647Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/hugovalters/statuses/117378477131230353", "record": "CVE-2024-12426", "field": "creation_timestamp", "uuid": "f1650d1a-a1ea-4794-b07b-f1761f635815", "url": "https://mastodon.social/users/hugovalters/statuses/117378477131230353"}]}