{"metadata": {"vulnerability": "CVE-2024-21654", "count": 17, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 9}}, "data": [{"timestamp": "2023-12-29T16:10:20.366Z", "date_only": false, "value": "2023-12-29T16:10:20.366Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21654", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-30T06:02:17.537Z", "date_only": false, "value": "2023-12-30T06:02:17.537520Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21654", "record": "GSD-2024-21654", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-12T20:59:43.094Z", "date_only": false, "value": "2024-01-12T20:59:43.094Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21654", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-12T20:59:43.094Z", "date_only": false, "value": "2024-01-12T20:59:43.094Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-21654", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-12T21:15:11.287Z", "date_only": false, "value": "2024-01-12T21:15:11.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21654", "record": "FKIE_CVE-2024-21654", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-12T21:15:11.287Z", "date_only": false, "value": "2024-01-12T21:15:11.287", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-21654", "record": "GSD-2024-21654", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-01-12T22:41:53Z", "date_only": false, "value": "2024-01-12T22:41:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167576", "record": "CVE-2024-21654", "field": "creation_timestamp", "uuid": "eef2d090-3f8a-4ad1-a378-59f2ffda30aa", "content": "https://ift.tt/WnFmYAp\nCVE-2024-21654", "url": "https://t.me/ctinow/167576"}, {"timestamp": "2024-01-15T18:47:01Z", "date_only": false, "value": "2024-01-15T18:47:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/168519", "record": "CVE-2024-21654", "field": "creation_timestamp", "uuid": "64b559b9-aa8a-4212-864b-90ff5cb9e645", "content": "https://ift.tt/mX9n1qy\nCVE-2024-21654", "url": "https://t.me/ctinow/168519"}, {"timestamp": "2024-01-16T01:31:14Z", "date_only": false, "value": "2024-01-16T01:31:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2820", "record": "CVE-2024-21654", "field": "creation_timestamp", "uuid": "7b8d1ce3-3087-4142-8011-9e8cc1c10cca", "content": "#ExploitObserverAlert\n\nCVE-2024-21654\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-21654. Rubygems.org is the Ruby community's gem hosting service. Rubygems.org users with MFA enabled would normally be protected from account takeover in the case of email account takeover. However, a workaround on the forgotten password form allows an attacker to bypass the MFA requirement and takeover the account. This vulnerability has been patched in commit 0b3272a.", "url": "https://t.me/arpsyndicate/2820"}, {"timestamp": "2024-01-22T19:45:11.213Z", "date_only": false, "value": "2024-01-22T19:45:11.213", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21654", "record": "GSD-2024-21654", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-02-03T02:26:53Z", "date_only": false, "value": "2024-02-03T02:26:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/178358", "record": "CVE-2024-21654", "field": "creation_timestamp", "uuid": "27e022a4-f483-45e8-80dd-d4e49ecd4f66", "content": "https://ift.tt/A3ZY1iH\nCVE-2024-21654 | RubyGems.org 2FA improper authentication (GHSA-4v23-vj8h-7jp2)", "url": "https://t.me/ctinow/178358"}, {"timestamp": "2024-08-01T22:27:36.174Z", "date_only": false, "value": "2024-08-01T22:27:36.174Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-21654", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-24T15:25:50.298Z", "date_only": false, "value": "2024-10-24T15:25:50.298055Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21654", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-24T15:25:50.298Z", "date_only": false, "value": "2024-10-24T15:25:50.298055Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21654", "record": "FKIE_CVE-2024-21654", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-10-24T15:27:56.733Z", "date_only": false, "value": "2024-10-24T15:27:56.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21654", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-24T15:27:56.733Z", "date_only": false, "value": "2024-10-24T15:27:56.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21654", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:09:56.163Z", "date_only": false, "value": "2026-06-17T07:09:56.163", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21654", "record": "FKIE_CVE-2024-21654", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T21:42:17.258Z", "anchors": {"origin": {"timestamp": "2024-01-12T20:59:43.094Z", "date_only": false, "value": "2024-01-12T20:59:43.094Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21654", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-12T20:59:43.094Z", "date_only": false, "value": "2024-01-12T20:59:43.094Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21654", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 89253754.164836, "hours": 24792.709490232224, "days": 1033.0295620930094, "min_seconds": 89253754.164836, "max_seconds": 89253754.164836, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-12T20:59:43.094Z", "date_only": false, "value": "2024-01-12T20:59:43.094Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21654", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T21:42:17.258Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}