{"metadata": {"vulnerability": "CVE-2024-1560", "count": 21, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 13}}, "data": [{"timestamp": "2024-02-15T19:02:52.076Z", "date_only": false, "value": "2024-02-15T19:02:52.076Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-1560", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-16T06:02:25.792Z", "date_only": false, "value": "2024-02-16T06:02:25.792213Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-1560", "record": "GSD-2024-1560", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-16T00:00:13.649Z", "date_only": false, "value": "2024-04-16T00:00:13.649Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-1560", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-16T00:15:08Z", "date_only": false, "value": "2024-04-16T00:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5MVJ-WMGJ-7Q8C", "record": "GHSA-5MVJ-WMGJ-7Q8C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-16T00:15:08.713Z", "date_only": false, "value": "2024-04-16T00:15:08.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-1560", "record": "FKIE_CVE-2024-1560", "field": "published"}, {"timestamp": "2024-04-16T00:15:08.713Z", "date_only": false, "value": "2024-04-16T00:15:08.713", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-1560", "record": "GSD-2024-1560", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-16T00:30:33Z", "date_only": false, "value": "2024-04-16T00:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5MVJ-WMGJ-7Q8C", "record": "GHSA-5MVJ-WMGJ-7Q8C", "field": "published"}, {"timestamp": "2024-04-16T11:10:51.689Z", "date_only": false, "value": "2024-04-16T11:10:51.689Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "CVE-2024-1560", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-04-16T13:24:07.103Z", "date_only": false, "value": "2024-04-16T13:24:07.103", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-1560", "record": "GSD-2024-1560", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-16T18:18:02Z", "date_only": false, "value": "2024-04-16T18:18:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5MVJ-WMGJ-7Q8C", "record": "GHSA-5MVJ-WMGJ-7Q8C", "field": "modified"}, {"timestamp": "2024-04-18T05:53:41Z", "date_only": false, "value": "2024-04-18T05:53:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4699", "record": "CVE-2024-1560", "field": "creation_timestamp", "uuid": "bc79be6d-4b28-43f2-86b6-7ff75170174d", "content": "#ExploitObserverAlert\n\nCVE-2024-1560\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1560. A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the `_delete_artifact_mlflow_artifacts` handler and `local_file_uri_to_path` function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the `delete_artifacts` function of `local_artifact_repo.py`, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.9019774", "url": "https://t.me/arpsyndicate/4699"}, {"timestamp": "2024-08-01T18:40:21.396Z", "date_only": false, "value": "2024-08-01T18:40:21.396Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-1560", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-09T19:53:39.821Z", "date_only": false, "value": "2024-08-09T19:53:39.821565Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-1560", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-09T19:53:39.821Z", "date_only": false, "value": "2024-08-09T19:53:39.821565Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-1560", "record": "FKIE_CVE-2024-1560", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-09T20:00:20.571Z", "date_only": false, "value": "2024-08-09T20:00:20.571Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-1560", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-09T20:00:20.571Z", "date_only": false, "value": "2024-08-09T20:00:20.571Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-1560", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-04T07:21:57.427Z", "date_only": false, "value": "2025-02-04T07:21:57.427Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2024-1560", "record": "BIT-MLFLOW-2024-1560", "field": "published"}, {"timestamp": "2026-06-17T07:04:30.317Z", "date_only": false, "value": "2026-06-17T07:04:30.317", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-1560", "record": "FKIE_CVE-2024-1560", "field": "lastModified"}, {"timestamp": "2026-07-07T11:45:39.349Z", "date_only": false, "value": "2026-07-07T11:45:39.349066Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1641", "record": "PYSEC-2026-1641", "field": "published"}, {"timestamp": "2026-07-07T17:24:42.068Z", "date_only": false, "value": "2026-07-07T17:24:42.068181Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1641", "record": "PYSEC-2026-1641", "field": "modified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2024-1560", "record": "BIT-MLFLOW-2024-1560", "field": "modified"}]}